maven

org.apache.opennlp:opennlp-tools

4 Total advisories

4 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.apache.opennlp:opennlp-tools is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 7.5

Maven

CVE-2026-42440

Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation

May 4, 2026

CRITICAL 9.1

Maven

CVE-2026-40682

Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing

May 4, 2026

CRITICAL 9.8

Maven

CVE-2026-42027

Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest

May 4, 2026

CRITICAL 9.8

Maven

CVE-2017-12620

Improper Restriction of XML External Entity Reference in Apache OpenNLP

May 17, 2022

Browse more Maven advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes