Maven/edu.stanford.nlp:stanford-corenlp CVE-2022-0198: medium 6.1, EPSS 0.74%
XML External Entity Reference in edu.stanford.nlp:stanford-corenlp
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.3.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mh83-jcw5-rjh8
- https://nvd.nist.gov/vuln/detail/CVE-2022-0198
- https://github.com/stanfordnlp/corenlp/commit/1f52136321cfca68b991bd7870563d06cf96624d
- https://github.com/stanfordnlp/corenlp
- https://huntr.dev/bounties/3d7e70fe-dddd-4b79-af62-8e058c4d5763
CVE-2022-0198 · published · modified · JSON