https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T22:12:04.010046+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-12620 CVE-2017-12620 2026-09-30T22:12:04.032043+00:00

Affected: Apache Software Foundation Apache OpenNLP

When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache OpenNLP are affected.