← All advisories

High severity7.1NVD Advisory· Published Jan 13, 2022· Updated Jun 17, 2026

CVE-2022-0198

CVE-2022-0198

Description

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
edu.stanford.nlp:stanford-corenlpMaven	<= 4.3.2	—

Affected products

3

Stanford/Corenlp
cpe:2.3:a:stanford:corenlp:*:*:*:*:*:*:*:*
Range: <=4.3.2
ghsa-coords
pkg:maven/edu.stanford.nlp/stanford-corenlp
Range: <= 4.3.2
stanfordnlp/stanfordnlp/corenlpv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/stanfordnlp/corenlp/commit/1f52136321cfca68b991bd7870563d06cf96624dnvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/3d7e70fe-dddd-4b79-af62-8e058c4d5763nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-mh83-jcw5-rjh8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0198ghsaADVISORY

News mentions

0

No linked articles in our index yet.