| CVE-2026-82617 |
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory -…
|
10.0
Critique
|
11 sept. 2026 |
| CVE-2026-67211 |
OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: -…
|
Non notée
|
11 sept. 2026 |
| CVE-2026-63317 |
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected:…
|
Non notée
|
24 juil. 2026 |
| CVE-2026-40682 |
XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions…
|
Non notée
|
4 mai 2026 |
| CVE-2026-42027 |
Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5,…
|
Non notée
|
4 mai 2026 |
| CVE-2026-42440 |
OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before…
|
Non notée
|
4 mai 2026 |
| CVE-2017-12620 |
When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is…
|
Non notée
|
2 oct. 2017 |