← All advisories

Critical severity9.8NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2021-44550

CVE-2021-44550

Description

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
edu.stanford.nlp:stanford-corenlpMaven	< 4.4.0	4.4.0

Affected products

3

Stanford/Corenlp
cpe:2.3:a:stanford:corenlp:4.3.2:*:*:*:*:*:*:*
CoreNLP/CoreNLPdescription
ghsa-coords
pkg:maven/edu.stanford.nlp/stanford-corenlp
Range: < 4.4.0

Patches

Vulnerability mechanics

References

4

github.com/stanfordnlp/CoreNLP/issues/1222nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-x2p8-rgfm-qw3vghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-44550ghsaADVISORY
github.com/stanfordnlp/CoreNLP/commit/5ee097dbede547023e88f60ed3f430ff09398b87ghsaWEB

News mentions

0

No linked articles in our index yet.