ai.tock:tock-nlp-model-stanford (>=20.3.2, <=22.3.2), com.github.pratikalladi:poligraph (>=1.0.0, <=1.0.1) +41 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (>=4.0.0, <=4.2.2)

edu.stanford.nlp:stanford-corenlp MAVEN version =4.0.0, =20.3.2, =1.0.0, =0.1.0-rc1, =2.0.0, =1.3.0, =1.4.0 - eu.fbk.dh:kd-stanfordannotator 0.1 - eu.fbk.dh:tint-depechemood 0.3 - eu.fbk.dh:tint-derived 0.3 - eu.fbk.dh:tint-digimorph-annotator 0.3 - eu.fbk.dh:tint-eval 0.3 -...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), com.github.jenshaase.uimascala:stanfordner_2.11 (0.6.1) +42 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.6.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - ae.teletronics.nlp:entityextraction =1.3, =0.1.0, =0.6.1, =2.0, =2.1 -...

edu.washington.cs.knowitall.nlptools:nlptools-coref-stanford_2.9.2 (>=2.2.0, <=2.2.5), edu.washington.cs.knowitall.nlptools:nlptools-parse-stanford_2.9.2 (>=2.2.0, <=2.3.0) +2 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (1.3.2)

edu.stanford.nlp:stanford-corenlp MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - edu.washington.cs.knowitall.nlptools:nlptools-coref-stanford2.9.2 =2.2.0, =2.2.0, =2.2.0,...

com.github.hungntbka:htime (1.0), com.github.keenon:loglinear (>=1.2.5, <=1.2.10) +14 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.5.2)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.github.hungntbka:htime 1.0 - com.github.keenon:loglinear =1.2.5, =1.0, =4.8.7, =4.8.2,...

com.googlecode.mate-tools:srl (4.31), de.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.distribution-gpl (1.5.0) +5 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.2.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.googlecode.mate-tools:srl 4.31 -...

com.articulatesoftware:sigma-component (>=2.09, <=2.10), com.github.helgeho:archivespark_2.11 (>=2.5, <=3.0.1) +9 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.5.1)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.articulatesoftware:sigma-component =2.09, =2.5, =5.1, =6.0.0, =5.6.0, =0.0.1, =1.3.3,...

com.github.mynlp:jigg (0.7.2), de.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.corenlp-gpl (>=1.9.0, <=1.9.3) +43 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.8.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.github.mynlp:jigg 0.7.2 -...

com.bbn.adept:adept-api (>=2.7.3, <=2.7.4), com.bbn.adept:adept-kb (>=2.7.3, <=2.7.4) +10 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.7.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.bbn.adept:adept-api =2.7.3, =2.7.3, =2.7.3, =0.7.0, =1.0.1, =3.1, =0.1, =1.0, =1.2 Source...

com.github.myedibleenso:processors-agiga_2.11 (>=0.0.1, <=0.0.2), edu.jhu.agiga:agiga (1.4) +14 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (1.3.5)

edu.stanford.nlp:stanford-corenlp MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.github.myedibleenso:processors-agiga2.11 =0.0.1, =2.4.2, =2.4.2, =2.4.2, =2.4.2, =2.4.2,...

edu.washington.cs.knowitall.nlptools:nlptools-coref-stanford_2.10 (2.4.1), edu.washington.cs.knowitall.nlptools:nlptools-coref-stanford_2.9.2 (>=2.3.0, <=2.4.1) +8 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (1.3.4)

edu.stanford.nlp:stanford-corenlp MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - edu.washington.cs.knowitall.nlptools:nlptools-coref-stanford2.10 2.4.1 -...

CVE-2021-3869

creationtimestamp| type| source ---|---|--- 2021-10-19 16:33:15+00:00| seen| https://t.me/cibsecurity/30754...

CVE-2021-3869

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.tock:tock-nlp-model-stanford (>=19.9.0, <=22.3.2) +202 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (>=1.2.0, <=4.2.2)

edu.stanford.nlp:stanford-corenlp MAVEN version =1.2.0, =1.3, =19.9.0, =2.09, =2.7.3, =2.7.3, =2.7.3, =2.0.0rc1, =2.0.1, =2.5, =3.0.1 - com.github.hungntbka:htime 1.0 - com.github.jenshaase.uimascala:arktweetpostagger2.11 0.6.1 - com.github.jenshaase.uimascala:arktweettokenizer2.11 0.6.1 -...

CVE-2021-3869

The CVE-2021-3869 entry concerns Stanford CoreNLP (corenlp) and is caused by improper restriction of XML External Entity (XXE) references. Public sources in the connected documents confirm this XXE vulnerability affecting CoreNLP, with references indicating potential exposure/read access issues v...