CVE-2026-40682

The Apache OpenNLP DictionaryEntryPersistor component is vulnerable to XML External Entity (XXE) injection in versions prior to 2.5.9 and 3.0.0-M3 . The root cause is that the DictionaryEntryPersistor class initializes a static SAXParserFactory at class-load time without enabling FEATURE_SECURE_P...

CVE-2017-12620

CVE-2017-12620 describes an XML External Entity (XXE) vulnerability in Apache OpenNLP when loading models or dictionaries that contain XML from untrusted sources. The connected documents identify the affected OpenNLP versions: 1.5.0–1.5.3, 1.6.0, and 1.7.0–1.7.2, 1.8.0–1.8.1. The XXE issue is the...

CVE-2026-42440

Apache OpenNLP is vulnerable to an Out-of-Memory (OOM) Denial of Service in the AbstractModelReader component. The methods getOutcomes(), getOutcomePatterns(), and getPredicates() read a 32-bit signed integer count from a binary model stream and pass it directly to array allocations without valid...

CVE-2026-42027

Apache OpenNLP is vulnerable to arbitrary class instantiation via its ExtensionLoader component in versions before 1.9.5, 2.5.9, and 3.0.0-M3. The instantiateExtension method uses Class.forName() to load classes based on the manifest.properties entry of a model archive. Because the type check occ...

CVE-2026-63317

Apache OpenNLP versions before 2.5.10 and before 3.0.0-M5 are vulnerable to arbitrary class instantiation because three code paths use Class.forName() to load classes without prior validation. Specifically, GeneratorFactory parses class names from XML descriptors in model archives, StreamFactoryR...

CVE-2026-82617

Apache OpenNLP versions 2.0.0 through 2.5.11 and 3.0.0-M1 through 3.0.0-M5 are affected by ambiguous nested quantifiers in the built-in EMAIL and URL name-finder patterns of RegexNameFinderFactory. The EMAIL pattern suffers quadratic-time ReDoS: a ~32 KB input without an @ forces re-scanning from...

CVE-2026-43825

Apache OpenNLP versions before 3.0.0-M4 are vulnerable to Untrusted Java Deserialization within the libsvm document categorization module (introduced in OPENNLP-1808). The root cause is that the SvmDoccatModel.deserialize(InputStream) method calls readObject() using java.io.ObjectInputStream with...

CVE-2026-67211

Apache OpenNLP versions 3.0.0-M4 and 3.0.0-M5 are vulnerable to a Denial of Service via an OutOfMemoryError in the SymSpellModelSerializer . The create() method fails to apply an upper bound to the unigramCount and bigramCount fields read from a binary SymSpell model stream, allowing an attacker ...