org.apache.opennlp:opennlp-tools vulnerabilities (Maven)

4 vulnerabilities.

• org.apache.opennlp:opennlp-tools Maven Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor CVE-2026-40682 Fix available 9.1 CriticalMay 4, 2026
• org.apache.opennlp:opennlp-tools Maven Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader CVE-2026-42027 Fix available 9.8 CriticalMay 4, 2026
• org.apache.opennlp:opennlp-tools Maven Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader CVE-2026-42440 Fix available 7.5 HighMay 4, 2026
• org.apache.opennlp:opennlp-tools Maven Improper Restriction of XML External Entity Reference in Apache OpenNLP CVE-2017-12620 Fix available 9.8 CriticalOctober 2, 2017