security.nuyts.tech
CVE-2016-4434 – NuytsTech Security
Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity (XXE)