Log in Start free

stanfordnlp

Products

ProductCVEsExploitedLatest
stanfordnlp/corenlp4–Jan 17, 2022
stanza3–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-115878 High 7.8 Stanza: RCE via pickle deserialization in the lemmatizer 0.6%
  • CVE-2026-59974 High 7.8 Stanza: Zip Slip Path Traversal in Model/Resource Extraction 0.4%
  • CVE-2026-54499 High 7.5 Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders 0.5%
  • CVE-2022-0239 Medium 4.7 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp 1.2%
  • CVE-2022-0198 Medium 6.1 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp 0.8%
  • CVE-2021-3869 High 8.6 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp 1.4%
  • CVE-2021-3878 Critical 9.8 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp 1.9%