stanfordnlp vulnerabilities
7 published CVEs name stanfordnlp among the affected products.
- 7Published CVEs7 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115878
Stanza: RCE via pickle deserialization in the lemmatizer
stanfordnlp · stanza
High7.8 - CVE-2026-59974
Stanza: Zip Slip Path Traversal in Model/Resource Extraction
stanfordnlp · stanza
High7.8 - CVE-2026-54499
Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders
stanfordnlp · stanza
High7.5 - CVE-2022-0239
Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
stanfordnlp · stanfordnlp/corenlp
Medium4.7 - CVE-2022-0198
Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
stanfordnlp · stanfordnlp/corenlp
Medium6.1 - CVE-2021-3869
Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
stanfordnlp · stanfordnlp/corenlp
High8.6 - CVE-2021-3878
Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
stanfordnlp · stanfordnlp/corenlp
Critical9.8