Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache OpenNLP 1.9.5, 2.5.9, 3.0.0-M3 Clear all filters
TI-2026-29367 CVE-2026-40682 · GHSA-4v8g-86x5-3vrc

Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

Priority MEDIUM 48

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a stati…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00495 Published 2026-05-04 Partial fix · 2.5.9, 3.0.0-M3 +1 CWE-611
TI-2026-30407 CVE-2026-42027 · GHSA-cx4m-2p55-rw7j

Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader

Priority MEDIUM 50

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The ExtensionLoader.instantiateExtension(Class, String) metho…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00707 Published 2026-05-04 Partial fix · 2.5.9, 3.0.0-M3 +1 CWE-470
TI-2026-30730 CVE-2026-42440 · GHSA-659w-93r5-9j6m

Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader

Priority MEDIUM 40

OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: The AbstractModelReader methods getOutcomes(), getOutco…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00603 Published 2026-05-04 Partial fix · 2.5.9, 3.0.0-M3 +1 CWE-789