Maven package

edu.stanford.nlp/stanford-corenlp

pkg:maven/edu.stanford.nlp/stanford-corenlp

Vulnerabilities (5)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2021-44550	Cri	9.8	< 4.4.0	4.4.0	Feb 24, 2022	An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
CVE-2022-0239	Cri	9.8	< 4.4.0	4.4.0	Jan 17, 2022	corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2022-0198	Hig	7.1	<= 4.3.2	—	Jan 13, 2022	corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3869	Hig	7.5	< 4.3.1	4.3.1	Oct 19, 2021	corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3878	Cri	9.8	< 4.3.1	4.3.1	Oct 15, 2021	corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVE-2021-44550CriFeb 24, 2022
affected < 4.4.0fixed 4.4.0
An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
CVE-2022-0239CriJan 17, 2022
affected < 4.4.0fixed 4.4.0
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2022-0198HigJan 13, 2022
affected <= 4.3.2
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3869HigOct 19, 2021
affected < 4.3.1fixed 4.3.1
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3878CriOct 15, 2021
affected < 4.3.1fixed 4.3.1
corenlp is vulnerable to Improper Restriction of XML External Entity Reference