Skip to content
OpenAdvisories

Package · Ubuntu

apache-opennlp

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.6

    Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML

    Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forNam…