GCVE - cpe:2.3:a:stanford:corenlp:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:stanford:corenlp:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Stanford (`f99b6af9-5051-5240-8d5d-a43f725ee9db`)
Product	Corenlp (`bfbdfb4a-41af-50da-a639-00f597743141`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/stanfordnlp/corenlp`	purl2cpe	2026-06-01 10:12:30.512565
`pkg:maven/edu.stanford.nlp/stanford-corenlp`	purl2cpe	2026-06-01 10:12:30.512568
`pkg:sourceforge/stanford-corenlp.mirror`	purl2cpe	2026-06-01 10:12:30.512570

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-0239`	vulnerable	2026-06-08 05:39:09.590421	Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp MEDIUM (4.7) corenlp is vulnerable to Improper Restriction of XML External Entity Reference Published: 2022-01-17T06:15:11.000Z Updated: 2024-08-23T14:38:48.375Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/a717aec2-5646-4a5f-ade0-dadc25736ae3 https://github.com/stanfordnlp/corenlp/commit/1940ffb938dc4f3f5bc5f2a2fd8b35aabbbae3dd	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0198`	vulnerable	2026-06-08 05:39:09.464877	Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp MEDIUM (6.1) corenlp is vulnerable to Improper Restriction of XML External Entity Reference Published: 2022-01-13T06:45:10.000Z Updated: 2024-08-02T23:18:42.562Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/3d7e70fe-dddd-4b79-af62-8e058c4d5763 https://github.com/stanfordnlp/corenlp/commit/1f52136321cfca68b991bd7870563d06cf96624d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3878`	vulnerable	2026-06-08 05:33:54.480053	Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CRITICAL (9.8) corenlp is vulnerable to Improper Restriction of XML External Entity Reference Published: 2021-10-15T13:40:21.000Z Updated: 2024-08-03T17:09:09.613Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/a11c889b-ccff-4fea-9e29-963a23a63dd2 https://github.com/stanfordnlp/corenlp/commit/e5bbe135a02a74b952396751ed3015e8b8252e99	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3869`	vulnerable	2026-06-08 05:33:54.477571	Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp HIGH (8.6) corenlp is vulnerable to Improper Restriction of XML External Entity Reference Published: 2021-10-19T12:30:32.000Z Updated: 2024-08-03T17:09:09.917Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/2f8baf6c-14b3-420d-8ede-9805797cd324 https://github.com/stanfordnlp/corenlp/commit/5d83f1e8482ca304db8be726cad89554c88f136a	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.