https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:19:28 +0000 https://cve.radiocsirt.org/vuln/cve-2020-9489 <p><strong>Affected:</strong> The Apache Software Foundation Apache Tika</p> <p>A carefully crafted or corrupt file may trigger a System.exit in Tika&#39;s OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika&#39;s ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade to 1.24.1 or later. The vulnerabilities in the MP4Parser were partially fixed by upgrading the com.googlecode:isoparser:1.1.22 dependency to org.tallison:isoparser:1.9.41.2. For unrelated security reasons, we upgraded org.apache.cxf to 3.3.6 as part of the 1.24.1 release.</p> <p><strong>Affected:</strong> The Apache Software Foundation Apache Tika</p> <p>A carefully crafted or corrupt file may trigger a System.exit in Tika&#39;s OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika&#39;s ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade to 1.24.1 or later. The vulnerabilities in the MP4Parser were partially fixed by upgrading the com.googlecode:isoparser:1.1.22 dependency to org.tallison:isoparser:1.9.41.2. For unrelated security reasons, we upgraded org.apache.cxf to 3.3.6 as part of the 1.24.1 release.</p> https://cve.radiocsirt.org/vuln/cve-2020-9489