Stanford vulnerabilities

Products

• Corenlp 5
• Webauth 2

Newest

• stanford stanza Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders CVE-2026-54499 Fix available 7.5 HighJune 19, 2026
• stanford parser Code injection in stanford-parser CVE-2023-39020 Fix available 9.8 CriticalJuly 28, 2023
• stanford corenlp Access Control vulnerability within CoreNLP CVE-2021-44550 Fix available 9.8 CriticalFebruary 23, 2022
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2022-0239 Fix available 4.7 MediumJanuary 17, 2022
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2022-0198 6.1 MediumJanuary 13, 2022
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2021-3869 Fix available 8.6 HighOctober 19, 2021
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2021-3878 Fix available 9.8 CriticalOctober 15, 2021
• stanford webauth, debian linux +1 more webauth before 4.6.1 has authentication credential disclosure CVE-2013-2106 7.5 HighDecember 3, 2019
• stanford webauth weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0,... CVE-2009-2945 Fix available 4.3 MediumSeptember 15, 2009