Debian/apache-opennlp: critical 9.1

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

osv: DEBIAN-CVE-2026-40682#Debian:13/apache-opennlp
https://security-tracker.debian.org/tracker/CVE-2026-40682

published 2026-05-04T17:16:23.657Z · modified 2026-10-27T09:47:43.445216346Z · JSON