A critical security flaw has been disclosed in Apache Tika that could result in an XML external entity ( XXE ) injection ...