What’s Vulnerable › Products

Apache Software Foundation Apache OpenNLP vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Apache Software Foundation Apache OpenNLP version is affected

Latest Apache Software Foundation Apache OpenNLP vulnerabilities

• CVE-2026-82617 — Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns (CVSS 9.8)
• CVE-2026-67211 — Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer (CVSS 7.5)
• CVE-2026-63317 — Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML (CVSS 5.6)
• CVE-2026-43825 — Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel (CVSS 7.3)
• CVE-2026-42440 — Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader (CVSS 7.5)
• CVE-2026-42027 — Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader (CVSS 9.8)
• CVE-2026-40682 — Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor (CVSS 9.1)
• CVE-2017-12620 — (CVSS 9.8)