Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache OpenNLP

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-67211

    Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer

    OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 (The opennlp-spellcheck extension was introduced in 3.0.0-M4. Releases 1.x and 2.x do not contain the affected code.) Descrip…

    Apache Software Foundation Apache OpenNLP apache-opennlp Ubuntu
  • High 7.5
    CVE-2026-42440

    Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader

    OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader  Versions Affected:  before 1.9.5 before 2.5.9 before 3.0.0-M3  Description: The AbstractModelReader methods getOutcomes(), getOutcomePatterns(), and getPredicates() ea…

    Apache Software Foundation Apache OpenNLP apache-opennlp apache-opennlp Debian Ubuntu Maven