CVE-2026-43825

Apache OpenNLP versions before 3.0.0-M4 are vulnerable to Untrusted Java Deserialization within the libsvm document categorization module (introduced in OPENNLP-1808). The root cause is that the SvmDoccatModel.deserialize(InputStream) method calls readObject() using java.io.ObjectInputStream with...

CVE-2026-43825 Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

CVE-2026-43825: Deserialization of Untrusted Data

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

PT-2026-55955

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 3.0.0-M4 Description Untrusted Java deserialization occurs in the SvmDoccatModel.deserializeInputStream function. The function uses java.io.ObjectInputStream to read an attacker-controlled stream and calls...

CVE-2026-42440

A flaw was found in Apache OpenNLP. A remote attacker can exploit this vulnerability by providing a specially crafted binary model .bin file. This file contains an excessively large count field, which leads to an unbounded array allocation and triggers an OutOfMemoryError. Successful exploitation...

CVE-2026-42027

A flaw was found in Apache OpenNLP. An attacker, by providing a specially crafted model archive, can exploit a vulnerability in the ExtensionLoader component. This allows the attacker to force the system to load and initialize any class present on the classpath, executing its static initializer...

SUSE CVE-2026-40682

XML External Entity XXE via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a static SAXParserFactory at class-load time without enabling FEATURESECUREPROCESSING ...

SUSE CVE-2026-42027

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The ExtensionLoader.instantiateExtensionClass, String method loads a class by its fully-qualified name via Class.forName and invokes its...

Linux Distros Unpatched Vulnerability : CVE-2026-42440

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3...

Linux Distros Unpatched Vulnerability : CVE-2026-40682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML External Entity XXE via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3...

org.apache.opennlp:opennlp-distr (>=3.0.0-m1, <=3.0.0-m2) potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (>=3.0.0-m1, <=3.0.0-m2)

org.apache.opennlp:opennlp-tools MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m2 Source cves: CVE-2026-42440 Source advisory: OSV:GHSA-659W-93R5-9J6M...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +884 more potentially affected by CVE-2026-42027 via org.apache.opennlp:opennlp-tools (>=2.0.0, <=2.5.8)

org.apache.opennlp:opennlp-tools MAVEN version =2.0.0, =0.1.0, =0.1.0, =2.12.1, =2.12.1, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-42027 Source advisory: GHSA-CX4M-2P55-RW7J...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +884 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (>=2.0.0, <=2.5.8)

org.apache.opennlp:opennlp-tools MAVEN version =2.0.0, =0.1.0, =0.1.0, =2.12.1, =2.12.1, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-42440 Source advisory: OSV:GHSA-659W-93R5-9J6M...

org.apache.opennlp:opennlp-brat-annotator (1.7.0), org.apache.opennlp:opennlp-distr (1.7.0) +2 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (1.7.0)

org.apache.opennlp:opennlp-tools MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.opennlp:opennlp-tools and may be impacted: - org.apache.opennlp:opennlp-brat-annotator 1.7.0 - org.apache.opennlp:opennlp-distr 1.7.0 -...

com.github.paramitamirza:catena (catena), com.github.paramitamirza:catena (>=1.0.1, <=1.0.2) +14 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (1.5.2-incubating)

org.apache.opennlp:opennlp-tools MAVEN version 1.5.2-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.opennlp:opennlp-tools and may be impacted: - com.github.paramitamirza:catena catena - com.github.paramitamirza:catena =1.0.1,...

org.apache.opennlp:opennlp-distr (>=3.0.0-m1, <=3.0.0-m2) potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (>=3.0.0-m1, <=3.0.0-m2)

org.apache.opennlp:opennlp-tools MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m2 Source cves: CVE-2026-42440 Source advisory: GHSA-659W-93R5-9J6M...

ai.tock:tock-bot-admin-server (>=20.3.0, <=20.3.3), ai.tock:tock-bot-admin-test-core (>=20.3.0, <=20.3.3) +124 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (1.9.2)

org.apache.opennlp:opennlp-tools MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.opennlp:opennlp-tools and may be impacted: - ai.tock:tock-bot-admin-server =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0, =20.3.0,...

org.apache.opennlp:opennlp-brat-annotator (1.9.5), org.apache.opennlp:opennlp-distr (1.9.5) +4 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (1.9.5)

org.apache.opennlp:opennlp-tools MAVEN version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.opennlp:opennlp-tools and may be impacted: - org.apache.opennlp:opennlp-brat-annotator 1.9.5 - org.apache.opennlp:opennlp-distr 1.9.5 -...

fr.vsct.tock:tock-bot-admin-server (>=0.4.0, <=0.6.7), fr.vsct.tock:tock-nlp-admin-server (>=0.4.0, <=0.6.7) +18 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (1.8.1)

org.apache.opennlp:opennlp-tools MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.opennlp:opennlp-tools and may be impacted: - fr.vsct.tock:tock-bot-admin-server =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.1.0, =0.1...

org.apache.opennlp:opennlp-distr (>=3.0.0-m1, <=3.0.0-m2) potentially affected by CVE-2026-42027 via org.apache.opennlp:opennlp-tools (>=3.0.0-m1, <=3.0.0-m2)

org.apache.opennlp:opennlp-tools MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m2 Source cves: CVE-2026-42027 Source advisory: OSV:GHSA-CX4M-2P55-RW7J...