Skip to content

Standard Reader

Tag

Xxe

Articles and publications tagged Xxe across the Atmosphere.

1article1publication

Articles

Publications

eiuspkz

eiuspkzOct 24, 2026

Apache Tika's PDF Parser Followed an XFA Reference Out of the Document

An uploaded PDF carried an XFA reference the parser was willing to resolve. What CVE-2025-66516 exposes about file-extraction trust boundaries, and why containing the parser matters more than watching it.

apache-tikacve-2025-66516

You've reached the end.