Stanfordnlp vulnerabilities
We track 3 vulnerabilities in Stanfordnlp products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.
Latest Stanfordnlp vulnerabilities
- 7.8 High severity
stanza: Improper Control of Generation of Code
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/train
- 7.8 High severity
stanza: Improper Limitation of a Pathname to a Restricted Directory
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.Zip
- 7.5 High severity
stanza: Deserialization of Untrusted Data
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load() attempt torch.load(..., weights_only=True) bu