Vulnerabilities Critical Apache Tika Vulnerability Leads to XXE Injection The bug allows attackers to carry out XML External Entity (XXE) injection attacks via crafted XFA files inside PDF files. Ionut ArghireDecember 8, 2025