CVE-2021-3878: Stanford Corenlp

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

Affected products

• Stanford Corenlp: before 4.3.1 (fixed in 4.3.1)

Published 2021-10-15. Last modified 2026-06-17.