← All advisories

High severityNVD Advisory· Published Oct 19, 2021· Updated Aug 3, 2024

Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp

CVE-2021-3869

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
edu.stanford.nlp:stanford-corenlpMaven	< 4.3.1	4.3.1

Affected products

2

ghsa-coords
pkg:maven/edu.stanford.nlp/stanford-corenlp
Range: < 4.3.1
stanfordnlp/stanfordnlp/corenlpv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-8gf7-w3cp-gfh3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3869ghsaADVISORY
github.com/stanfordnlp/corenlp/commit/5d83f1e8482ca304db8be726cad89554c88f136aghsax_refsource_MISCWEB
huntr.dev/bounties/2f8baf6c-14b3-420d-8ede-9805797cd324ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.