Apache Opennlp vulnerabilities

8 CVEs affecting Apache Opennlp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-82617, published 2026-09-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-43825, published 2026-07-06. High severity, CVSS 7.3. EPSS: 13.9% chance of exploitation in the next 30 days. Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 (libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x…
CVE-2017-12620, published 2017-10-03. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from…
CVE-2026-42027, published 2026-05-04. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The…
CVE-2026-42440, published 2026-05-04. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: The AbstractModelReader…
CVE-2026-63317, published 2026-07-24. Medium severity, CVSS 5.6. EPSS: 0.9% chance of exploitation in the next 30 days. Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache…
CVE-2026-40682, published 2026-05-04. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor…
CVE-2026-82617, published 2026-09-11. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX_NAME_FINDER.EMAIL and DEFAULT_REGEX_NAME_FINDER.URL - contain ambiguous nested…
CVE-2026-67211, published 2026-09-11. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 (The opennlp-spellcheck extension was introduced in 3.0.0-M4.…