akkadian (>=1.0.2, <=1.0.12), allennlp (0.8.5) +22 more potentially affected by CVE-2025-3730 via torch (1.1.0)

torch PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - akkadian =1.0.2, =0.8.5.dev201908202300, =0.0.6, =0.1.0, =0.6.8, =0.1.0, =0.2.0, =0.3.0 and more Source cves: CVE-2025-3730 Source advisory:...

EUVD-2020-1493

Malware in sbrugna...

EUVD-2021-0830

Malware in sbrugna...

EUVD-2022-0496

Malicious code in bioql PyPI...

EUVD-2022-2592

Malicious code in bioql PyPI...

EUVD-2022-3176

Malicious code in bioql PyPI...

EUVD-2022-1244

Malicious code in bioql PyPI...

EUVD-2022-0648

Malicious code in bioql PyPI...

CVE-2022-0239

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

CVE-2021-3869

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

CVE-2021-3878

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

akkadian (>=1.0.2, <=1.0.12), allennlp (0.8.5) +22 more potentially affected by CVE-2025-32434 via torch (1.1.0)

torch PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - akkadian =1.0.2, =0.8.5.dev201908202300, =0.0.6, =0.1.0, =0.6.8, =0.1.0, =0.2.0, =0.3.0 and more Source cves: CVE-2025-32434 Source advisory:...

Oracle Business Intelligence Enterprise Edition (OAS 7.0) (July 2024 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...

Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to multiple vulnerabilities

Summary IBM Cognos Analytics is affected but not classified as vulnerable to vulnerabilities, based on current information, in the following 3rd-party components: Stanford coreNLP, FasterXML jackson-databind, SnakeYAML, Dromera Hutool, jsoup, Node.js vm2 and Node.js http-cache-semantics. These...

Stanford CoreNlp code injection vulnerability

Stanford CoreNlp is a suite of open source, natural language parsing tools written in Java by the Stanford Nlp Group team. A security vulnerability exists in Stanford CoreNlp stanford-parser v3.9.2 and earlier versions, which stems from a code injection vulnerability in the component...

Improper Restriction of XML External Entity Reference in Stanford CoreNLP

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

GHSA-8GF7-W3CP-GFH3 Improper Restriction of XML External Entity Reference in Stanford CoreNLP

corenlp is vulnerable to Improper Restriction of XML External Entity Reference...

com.bericotech:clavin-nerd (>=2.0.0rc1, <=2.1.0), com.cebglobal:xpresso (0.9.0) +14 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (3.4.1)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.bericotech:clavin-nerd =2.0.0rc1, =0.3.1, =0.9.0, =1.4, =1.4, =1.4, =1.4, =1.8, =1.7, =1....

com.github.jenshaase.uimascala:arktweetpostagger_2.11 (0.6.1), com.github.jenshaase.uimascala:arktweettokenizer_2.11 (0.6.1) +10 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (1.2.0)

edu.stanford.nlp:stanford-corenlp MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.github.jenshaase.uimascala:arktweetpostagger2.11 0.6.1 -...

edu.washington.cs.knowitall.nlptools:nlptools-coref-stanford_2.9.2 (>=2.2.0, <=2.2.5), edu.washington.cs.knowitall.nlptools:nlptools-parse-stanford_2.9.2 (>=2.2.0, <=2.3.0) +2 more potentially affected by CVE-2021-3869 via edu.stanford.nlp:stanford-corenlp (1.3.2)

edu.stanford.nlp:stanford-corenlp MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - edu.washington.cs.knowitall.nlptools:nlptools-coref-stanford2.9.2 =2.2.0, =2.2.0, =2.2.0,...