Apache Software Foundation Apache OpenNLP

• CVE-2026-82617 Critical 10.0 Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns 0.8%
• CVE-2026-67211 High 7.5 Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer 0.7%
• CVE-2026-63317 Medium 5.6 Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML 0.9%
• CVE-2026-40682 Critical 9.1 Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor 0.5%
• CVE-2026-42027 Critical 9.8 Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader 0.7%
• CVE-2026-42440 High 7.5 Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader 0.6%