stanfordnlp stanza

• CVE-2026-115878 High 7.8 Stanza: RCE via pickle deserialization in the lemmatizer 0.6%
• CVE-2026-59974 High 7.8 Stanza: Zip Slip Path Traversal in Model/Resource Extraction 0.4%
• CVE-2026-54499 High 7.5 Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders 0.5%