CVE-2018-11761 on Ubuntu 18.04 LTS (bionic) - low.
Description:
In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.