CVE-2026-67211

OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck extension was introduced in 3.0.0-M4. Releases 1.x and 2.x do not contain the affected code. Description: The SymSpellModelSerializer.create...

CVE-2026-67211

Apache OpenNLP versions 3.0.0-M4 and 3.0.0-M5 are affected by an Out-of-Memory Denial of Service in the SymSpellModelSerializer.create() method. The method reads two 32-bit count fields (unigramCount, bigramCount) from a binary SymSpell model stream and passes them directly to LinkedHashMap.newLi...