yakovsh2

31 ms·

1. 1.▲
   CVE-2025-54988: Apache Tika XXE vulnerability(lists.apache.org)

   1 points by yakovsh2 1y ago|1 comments
2. 2.▲
   by yakovsh2 1y ago

   Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be a
3. 3.▲
   by yakovsh2 5y ago

   Default encoding is now UTF-8, due to the way the RFC process works it is not in the original document: https://www.iana.org/assignments/media-types/text/csv
4. 4.▲
   by yakovsh2 5y ago

   (I'm the author of the RFC) Not sure why this is trending now, but this RFC is being revised now: https://datatracker.ietf.org/doc/html/draft-shafranovich-rfc... Suggestions and comments are welcome here: ht