[CVE-2025-66516] CRITICAL: Apache Tika tika-core 3.0.0 - Parser PDF Module Vulnerability

[nthmost-orkes]

Vulnerability Report

Field	Value
CVE	CVE-2025-66516
Severity	CRITICAL
Library	org.apache.tika:tika-core
Source	workers.jar
Installed Version	3.0.0
Fixed Version	3.2.2

Summary

tika-core: tika-parsers: tika-parser-pdf-module: Apache Tika parsers, Apache Tika PDF...

References

• NVD Entry
• OSV Database

---

Filed from container vulnerability scan of workers.jar

[nthmost-orkes]

Fix PR: conductor-oss/conductor#800 (pins tika-core to 3.2.2 via Gradle dependency constraints)