Approved changes feed: RSS · Atom
cpe:2.3:a:stanfordnlp:stanza:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Stanfordnlp (e15c78f6-b104-5cc5-af34-8dda0a7a6280) |
|---|---|
| Product | Stanza (88895dd4-2545-562b-b0c0-e938b6b3abdd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-59974 |
vulnerable | 2026-10-13 12:28:35.708694 |
Stanza: Zip Slip Path Traversal in Model/Resource Extraction
HIGH (7.8)
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating member paths, and the vulnerable extraction path is reachable through stanza.download and stanza.install_corenlp. A malicious archive containing parent-directory traversal entries can write outside the intended model directory, allowing files writable by the Stanza process to be overwritten and potentially enabling code execution through modified shell configuration, SSH authorization data, Python packages, or executable scripts. This issue is fixed in version 1.14.0.
Published: 2026-09-16T16:10:41.804Z
Updated: 2026-09-16T17:28:08.634Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54499 |
vulnerable | 2026-07-29 01:00:27.865824 |
Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders
HIGH (7.5)
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load() attempt torch.load(..., weights_only=True) but fall back to torch.load(..., weights_only=False) on attacker-controllable pickle.UnpicklingError, allowing a malicious .pt pretrain or model file to execute arbitrary pickle code when a Stanza NLP pipeline loads it. This issue is fixed in version 1.12.2.
Published: 2026-07-08T22:23:02.664Z
Updated: 2026-07-09T13:13:28.368Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.