grobid vulnerabilities

1 known vulnerability in grobid from grobidOrg. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  grobid: Uncontrolled Resource Consumption

  CVE-2026-123356Nov 6, 2026grobidOrg

  GROBID is machine learning software for extracting information from scholarly documents. Prior to 0.9.1, the unauthenticated /api/modelTraining endpoint calls GrobidRestProcessTraining.trainModel in GrobidRestProcessTraining.java, where each request creates Ex