Apache Software Foundation Opennlp vulnerabilities

• apache opennlp Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns CVE-2026-82617 Fix available 10.0 CriticalSeptember 11, 2026
• apache opennlp Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer CVE-2026-67211 7.5 HighSeptember 11, 2026
• apache opennlp Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML CVE-2026-63317 Fix available 5.6 MediumJuly 24, 2026
• apache opennlp, apache software foundation opennlp :: core :: ml :: libsvm +1 more Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel CVE-2026-43825 EPSS 13.9% 7.3 HighJuly 6, 2026
• apache opennlp, red hat build of apache camel for spring boot 4, data grid 8 +4 more +6 more Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor CVE-2026-40682 Fix available 9.1 CriticalMay 4, 2026
• apache opennlp, red hat build of apache camel for spring boot 4, data grid 8 +5 more +7 more Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader CVE-2026-42027 Fix available 9.8 CriticalMay 4, 2026
• apache opennlp, red hat data grid 8, fuse 7 +2 more +4 more Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader CVE-2026-42440 Fix available 7.5 HighMay 4, 2026
• apache opennlp Improper Restriction of XML External Entity Reference in Apache OpenNLP CVE-2017-12620 Fix available 9.8 CriticalOctober 2, 2017