Stanford Corenlp
5 CVEs affecting Stanford Corenlp. Latest disclosed: 2022-02-24. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44550 | Critical | 9.8 | 2022-02-24 | An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159). |
CVE-2022-0239 | Critical | 9.8 | 2022-01-17 | corenlp is vulnerable to Improper Restriction of XML External Entity Reference |
CVE-2021-3878 | Critical | 9.8 | 2021-10-15 | corenlp is vulnerable to Improper Restriction of XML External Entity Reference |
CVE-2021-3869 | High | 7.5 | 2021-10-19 | corenlp is vulnerable to Improper Restriction of XML External Entity Reference |
CVE-2022-0198 | High | 7.1 | 2022-01-13 | corenlp is vulnerable to Improper Restriction of XML External Entity Reference |