CVE-2023-39020

Summary: CVE-2023-39020 affects stanford-parser v3.9.2 and earlier. The issue is a code injection vulnerability in the function edu.stanford.nlp.io.getBZip2PipedInputStream, exploitable by passing an unchecked argument. Reported products/refs consistently tie the weakness to Stanford CoreNLP’s st...