Grobidorg Grobid vulnerabilities

• grobidorg grobid GROBID is vulnerable to OS command injection through crafted PDF filenames CVE-2026-123357 0.0 NoneNovember 6, 2026
• grobidorg grobid GROBID: Unauthenticated `/api/modelTraining` Endpoint Allows Unbounded Thread Pool Creation (DoS) CVE-2026-123356 7.5 HighNovember 6, 2026