← All advisories

High severity7.5NVD Advisory· Published Oct 19, 2021· Updated Jun 17, 2026

CVE-2021-3869

CVE-2021-3869

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
edu.stanford.nlp:stanford-corenlpMaven	< 4.3.1	4.3.1

Affected products

3

Stanford/Corenlp
cpe:2.3:a:stanford:corenlp:*:*:*:*:*:*:*:*
Range: <=4.3.0
ghsa-coords
pkg:maven/edu.stanford.nlp/stanford-corenlp
Range: < 4.3.1
stanfordnlp/stanfordnlp/corenlpv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/stanfordnlp/corenlp/commit/5d83f1e8482ca304db8be726cad89554c88f136anvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/2f8baf6c-14b3-420d-8ede-9805797cd324nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-8gf7-w3cp-gfh3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3869ghsaADVISORY

News mentions

0

No linked articles in our index yet.