CVE-2022-30126

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

• http://www.openwall.com/lists/oss-security/2022/05/16/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/05/31/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/06/27/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4Mailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220624-0004/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2022/05/16/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/05/31/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/06/27/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4Mailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220624-0004/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisory

Published

May 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3012A vulnerability was found in oretnom23 Fast Food Ordering Sy…8.8
• CVE-2022-30120XSS in /dashboard/blocks/stacks/view_details/ - old browsers…6.1
• CVE-2022-30121The “LANDesk(R) Management Agent” service exposes a socket a…6.7
• CVE-2022-30122A possible denial of service vulnerability exists in Rack <2…7.5
• CVE-2022-30123A sequence injection vulnerability exists in Rack <2.0.9.1, …10
• CVE-2022-30124An improper authentication vulnerability exists in Rocket.Ch…6.8
• CVE-2022-30127Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-30128Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-30129Visual Studio Code Remote Code Execution Vulnerability8.8
• CVE-2022-3013A vulnerability classified as critical has been found in Sou…9.8
• CVE-2022-30130.NET Framework Denial of Service Vulnerability3.3
• CVE-2022-30131Windows Container Isolation FS Filter Driver Elevation of Pr…7.8