Stanford

9 CVEs across 4 Stanford products. Browse Stanford vulnerabilities, severities, and proof-of-concept exploits.

Stanford products with known CVEs

ProductCVEs
Corenlp5
Webauth2
Stanford Parser1
Stanza1
Stanford CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54499High7.52026-07-08Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loader…
CVE-2023-39020Critical9.82023-07-28stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This v…
CVE-2021-44550Critical9.82022-02-24An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
CVE-2022-0239Critical9.82022-01-17corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2022-0198High7.12022-01-13corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3869High7.52021-10-19corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3878Critical9.82021-10-15corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2013-2106High7.52019-12-03webauth before 4.6.1 has authentication credential disclosure
CVE-2009-29452009-09-15weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances in…