Package
apache-tika-3.3
Component
jetty-server
Latest update
Fixed version
3.3.2-r2
5.3
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
3.3.2-r2Status
Impact
The bundled Jetty is on the 11.0 line, for which upstream published no fix; the advisory records that line as affected through its final release, 11.0.26, with no patched version. The Jetty version is governed by the bundled Apache CXF 4.0 release, and a fixed Jetty is reachable only through CXF 4.1 or later, which upstream adopts only in an as-yet unreleased major line.
Status