Skip to content
OpenAdvisories

Package · PyPI

stanza

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-115878 Public exploit

    Stanza: RCE via pickle deserialization in the lemmatizer

    Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trai…

    Stanford NLP stanza stanza PyPI