Apache · Apache Tika · CVE-2022-30973
**Name of the Vulnerable Software and Affected Versions**
Apache Tika versions 1.x through 1.28.2
**Description**
A denial of service issue exists due to a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler, which can lead to backtracking on a specially crafted file. This issue only affects users running the StandardsExtractingContentHandler, a non-standard handler.
**Recommendations**
For Apache Tika versions 1.x through 1.28.2, update to version 1.28.3 to resolve the issue.
As a temporary workaround, consider disabling the StandardsExtractingContentHandler until a patch is available.