Does STAT get impacted by critical security vulnerability in Apache Tika? (4381538)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

Does STAT get impacted by critical security vulnerability in Apache Tika?
Description

Does STAT get impacted by critical security vulnerability in Apache Tika?

(CVE 2025 66516, CVSS 10.0): https://nvd.nist.gov/vuln/detail/CVE-2025-66516
Cause

Critical XXE in Apache Tika tika-core (1.13-3.2.1), CVE-2025-66516, CVSS 10.0.
Resolution

Stat RD Team confirmed that STAT does not use Apache Tika in its codebase and there are no plans to incorporate it. As a result, STAT is not affected by this vulnerability.

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title