CVE-2026-115878

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores posdict as gzip-compress...

GHSA-GH9R-C94J-CMP5 Stanza: RCE via pickle deserialization in the lemmatizer

TL;DR Loading an attacker-supplied lemma .pt runs arbitrary code as the loading user. Since 1.14.0 the lemmatizer stores posdict as a gzip-compressed pickle in the checkpoint's dicts field a bytes value. torch.loadweightsonly=True treats bytes as a primitive and passes it through unexamined, so i...

EUVD-2026-116216

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores posdict as gzip-compress...

CVE-2026-115878

The Stanza NLP Python library (versions 1.14.0 to 1.15.0 ) is vulnerable to Remote Code Execution (RCE) due to insecure pickle deserialization in the lemmatizer component. The root cause is located in stanza/models/lemma/trainer.py, where Trainer.load processes a gzip-compressed pickle stream (po...

CVE-2026-115878 Stanza: RCE via pickle deserialization in the lemmatizer

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores posdict as gzip-compress...

CVE-2026-115878 Stanza: RCE via pickle deserialization in the lemmatizer

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores posdict as gzip-compress...

com.github.heideltime:heideltime (>=2.0.1, <=2.2.1), com.kennycason:fleschkincaid (1.0) +10 more potentially affected by CVE-2021-44550 via edu.stanford.nlp:stanford-corenlp (3.3.1)

edu.stanford.nlp:stanford-corenlp MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-corenlp and may be impacted: - com.github.heideltime:heideltime =2.0.1, =0.0.2, =0.0.3, =2.0.0, =1.6.0, =3.1, =3.3 -...