Apache Issues Max-Severity Tika CVE After Patch MissThe Apache Software Foundation's earlier fix for a critical Tika flaw missed the full scope of the vulnerability, prompting an updated advisory and CVE. December 8, 2025