Maven/edu.stanford.nlp:stanford-corenlp CVE-2021-3869: high 7.5, EPSS 1.36%
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
Action: Upgrade edu.stanford.nlp:stanford-corenlp to 4.3.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.1 | - |
Fixed versions
| 4.3.1 |
Sources
- osv: GHSA-8gf7-w3cp-gfh3
- https://nvd.nist.gov/vuln/detail/CVE-2021-3869
- https://github.com/stanfordnlp/corenlp/commit/5d83f1e8482ca304db8be726cad89554c88f136a
- https://github.com/stanfordnlp/CoreNLP
- https://huntr.dev/bounties/2f8baf6c-14b3-420d-8ede-9805797cd324
CVE-2021-3869 · published · modified · JSON