| CVE-2026-82617 |
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory -…
|
10.0
Critical
|
Sep 11, 2026 |
| CVE-2026-67211 |
OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: -…
|
Not rated
|
Sep 11, 2026 |
| CVE-2026-63317 |
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected:…
|
Not rated
|
Jul 24, 2026 |
| CVE-2026-40682 |
XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions…
|
Not rated
|
May 4, 2026 |
| CVE-2026-42027 |
Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5,…
|
Not rated
|
May 4, 2026 |
| CVE-2026-42440 |
OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before…
|
Not rated
|
May 4, 2026 |
| CVE-2017-12620 |
When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is…
|
Not rated
|
Oct 2, 2017 |