CVE-2022-0239: Stanford Corenlp

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

Affected products

• Stanford Corenlp: before 4.4.0 (fixed in 4.4.0)

Published 2022-01-17. Last modified 2026-06-17.