apache-opennlp vulnerabilities (Debian)

5 vulnerabilities.

• apache-opennlp Debian Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns CVE-2026-82617 Fix available 10.0 CriticalSeptember 11, 2026
• apache-opennlp Debian Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML CVE-2026-63317 Fix available 5.6 MediumJuly 24, 2026
• apache-opennlp Debian Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor CVE-2026-40682 Fix available 9.1 CriticalMay 4, 2026
• apache-opennlp Debian Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader CVE-2026-42027 Fix available 9.8 CriticalMay 4, 2026
• apache-opennlp Debian Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader CVE-2026-42440 Fix available 7.5 HighMay 4, 2026