CVE-2026-12252

CVE-2026-12252 affects nltk/nltk versions 3.9.3 and earlier, leaving five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, StanfordNeuralDependencyParser) vulnerable to untrusted JAR code execution. These classes accept user-controlled JA...

EUVD-2023-1933

Malicious code in bioql PyPI...

CVE-2023-39020

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

com.github.paramitamirza:catena (catena), com.github.paramitamirza:catena (>=1.0.1, <=1.0.2) +3 more potentially affected by CVE-2023-39020 via edu.stanford.nlp:stanford-parser (3.2.0)

edu.stanford.nlp:stanford-parser MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-parser and may be impacted: - com.github.paramitamirza:catena catena - com.github.paramitamirza:catena =1.0.1, =1.0.2 -...

GHSA-353M-JH2M-72V4 Code injection in stanford-parser

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

com.intel.ie.analytics:informationextraction (1.0) potentially affected by CVE-2023-39020 via edu.stanford.nlp:stanford-parser (3.6.0)

edu.stanford.nlp:stanford-parser MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-parser and may be impacted: - com.intel.ie.analytics:informationextraction 1.0 Source cves: CVE-2023-39020 Source advisory:...

org.apdplat:deep-qa (>=1.1, <=1.2) potentially affected by CVE-2023-39020 via edu.stanford.nlp:stanford-parser (3.3.1)

edu.stanford.nlp:stanford-parser MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-parser and may be impacted: - org.apdplat:deep-qa =1.1, =1.2 Source cves: CVE-2023-39020 Source advisory:...

com.github.fracpete:nlp-weka-package (>=2015.3.25, <=2019.3.29) potentially affected by CVE-2023-39020 via edu.stanford.nlp:stanford-parser (3.4.1)

edu.stanford.nlp:stanford-parser MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on edu.stanford.nlp:stanford-parser and may be impacted: - com.github.fracpete:nlp-weka-package =2015.3.25, =2019.3.29 Source cves: CVE-2023-39020 Source...

CVE-2023-39020

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39020

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39020

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

Code injection

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39020

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39020

Summary: CVE-2023-39020 affects stanford-parser v3.9.2 and earlier. The issue is a code injection vulnerability in the function edu.stanford.nlp.io.getBZip2PipedInputStream, exploitable by passing an unchecked argument. Reported products/refs consistently tie the weakness to Stanford CoreNLP’s st...

CVE-2023-39020

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39020

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...

PT-2023-26741 · Unknown · Stanford-Parser

Name of the Vulnerable Software and Affected Versions: stanford-parser versions 3.9.2 and below Description: The issue is related to a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument to t...

CVE-2023-39020: Improper Control of Generation of Code

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument...