All 7 CVE vulnerabilities found in Apache OpenNLP, with AI-generated Chinese analysis, references, and POCs.
Vendor: Apache Software Foundation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-82617 | Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns | 10.0 | Critical | 2026-09-11 |
| CVE-2026-67211 | Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer CWE-789 | - | - | 2026-09-11 |
| CVE-2026-63317 | Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML CWE-470 | - | - | 2026-07-24 |
| CVE-2026-40682 | Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor CWE-611 | 9.8 | - | 2026-05-04 |
| CVE-2026-42027 | Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader CWE-470 | 9.8 | - | 2026-05-04 |
| CVE-2026-42440 | Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader CWE-789 | 7.5 | - | 2026-05-04 |
| CVE-2017-12620 | Apache OpenNLP 安全漏洞 | 9.8 | - | 2017-10-02 |
All 7 known CVE vulnerabilities affecting Apache OpenNLP with full Chinese analysis, references, and POCs where available.