← All advisories

Critical severityNVD Advisory· Published Oct 15, 2021· Updated Aug 3, 2024

Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp

CVE-2021-3878

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
edu.stanford.nlp:stanford-corenlpMaven	< 4.3.1	4.3.1

Affected products

2

ghsa-coords
pkg:maven/edu.stanford.nlp/stanford-corenlp
Range: < 4.3.1
stanfordnlp/stanfordnlp/corenlpv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-5h9g-8xcv-qjq9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3878ghsaADVISORY
github.com/stanfordnlp/corenlp/commit/e5bbe135a02a74b952396751ed3015e8b8252e99ghsax_refsource_MISCWEB
huntr.dev/bounties/a11c889b-ccff-4fea-9e29-963a23a63dd2ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.