Stanfordnlp vulnerabilities

Products

• Stanfordnlp/corenlp 4
• Stanza 3

Newest

• stanfordnlp stanza Stanza: RCE via pickle deserialization in the lemmatizer CVE-2026-115878 Fix available 7.8 HighNovember 3, 2026
• stanfordnlp stanza Stanza: Zip Slip Path Traversal in Model/Resource Extraction CVE-2026-59974 7.8 HighSeptember 16, 2026
• stanford stanza Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders CVE-2026-54499 Fix available 7.5 HighJune 19, 2026
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2022-0239 Fix available 4.7 MediumJanuary 17, 2022
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2022-0198 6.1 MediumJanuary 13, 2022
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2021-3869 Fix available 8.6 HighOctober 19, 2021
• stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 more Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2021-3878 Fix available 9.8 CriticalOctober 15, 2021