[TIKA-3539] jdom 2.0.6 dependency in tika-parser-news-module has unfixed CVE

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.2.1
• Component/s: parser
• External issue URL: https://nvd.nist.gov/vuln/detail/CVE-2021-33813
• Assignee: Lewis John McGibbney
• Reporter: Julian Reschke
• Created: 26/Aug/21 13:11
• Updated: 30/Dec/21 04:34
• Resolved: 30/Dec/21 04:34

Description

Might be good to avoid the use of JDOM altogether.

Issue Links

• is duplicated by: TIKA-3488 Security issue XXE in TIKA due to JDOM