A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.
{ "nvd_published_at": "2019-08-02T19:15:00Z", "github_reviewed_at": "2019-08-06T01:41:24Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [ "CWE-770" ] }