Search CVE reports


Toggle filters

1 – 5 of 5 results


CVE-2026-63317

Medium priority
Needs evaluation

Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its...

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-43825

Medium priority
Needs evaluation

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected:   before 3.0.0-M4 (libsvm document categorization module; introduced in   OPENNLP-1808 and only present on the 3.x...

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-42440

Medium priority
Needs evaluation

OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: The AbstractModelReader methods getOutcomes(),...

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-42027

Medium priority
Needs evaluation

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The ExtensionLoader.instantiateExtension(Class, String) method loads...

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-40682

Medium priority
Needs evaluation

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a...

1 affected package

apache-opennlp

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
apache-opennlp Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages