CVE-2026-59974

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating...

CVE-2026-59974

Stanza is a Stanford NLP Python library. Prior to 1.14.0 , the function stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating member paths. The vulnerable extraction path is reachable through stan...