stanfordnlp

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

stanfordnlp records in CISA KEV

No stanfordnlp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Corenlp 5 records HIGH Webauth 2 records LOW Stanford Parser 1 record HIGH Stanza 1 record HIGH

Records

1 record in Stanford Parser · all components

TI-2023-20254 CVE-2023-39020 · GHSA-353m-jh2m-72v4

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability…

HIGH 82

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0104 Published 2023-07-28 Fixed in 4.5.5 CWE-94

Open these records in search →

Critical	4
High	6
Medium	1
Low	0
No CVSS	0