← All advisories

Critical severity9.8NVD Advisory· Published Oct 15, 2021· Updated Jun 17, 2026

CVE-2021-3878

CVE-2021-3878

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
edu.stanford.nlp:stanford-corenlpMaven	< 4.3.1	4.3.1

Affected products

3

Stanford/Corenlp
cpe:2.3:a:stanford:corenlp:*:*:*:*:*:*:*:*
Range: <4.3.1
ghsa-coords
pkg:maven/edu.stanford.nlp/stanford-corenlp
Range: < 4.3.1
stanfordnlp/stanfordnlp/corenlpv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/stanfordnlp/corenlp/commit/e5bbe135a02a74b952396751ed3015e8b8252e99nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/a11c889b-ccff-4fea-9e29-963a23a63dd2nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-5h9g-8xcv-qjq9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3878ghsaADVISORY

News mentions

0

No linked articles in our index yet.