Linux Distros Unpatched Vulnerability : CVE-2026-67211

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck...

CVE-2026-67211

OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck extension was introduced in 3.0.0-M4. Releases 1.x and 2.x do not contain the affected code. Description: The SymSpellModelSerializer.create...

EUVD-2026-76167

OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck extension was introduced in 3.0.0-M4. Releases 1.x and 2.x do not contain the affected code. Description: The SymSpellModelSerializer.create...

CVE-2026-67211

Apache OpenNLP versions 3.0.0-M4 and 3.0.0-M5 are vulnerable to a Denial of Service via an OutOfMemoryError in the SymSpellModelSerializer . The create() method fails to apply an upper bound to the unigramCount and bigramCount fields read from a binary SymSpell model stream, allowing an attacker ...

PT-2026-89998

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions 3.0.0-M4 through 3.0.0-M5 Description The SymSpellModelSerializer.create method reads two 32-bit signed integer count fields, unigramCount and bigramCount, from a binary SymSpell model stream and passes them to...