Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

stanfordnlp/corenlp

              main @ 1b7edd1
            

Fixes

CVEs

CRITICAL

Peak severity

47.8%

Coverage

Highlights

Denial of Service: 11 prior fixes. Scrutinize any change in this area.

src/edu/stanford/nlp/pipeline/StanfordCoreNLPServer.java: most-fixed (4 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Arbitrary Code Execution: The server allowed remote code execution by letting users specify arbitrary serializer class names, leading to unsafe deserialization. Developers must strictly enforce allowlists for dynamic instantiation.

XML External Entity (XXE): Standard DocumentBuilderFactory and SchemaFactory components were initialized without disabling external DTDs and entity resolution, allowing attackers to perform local file retrieval or SSRF via malicious XML payloads.

Command Injection: Piping unvalidated user input directly into system execution environments (such as runtime exec calls for bz2/bzcat commands) historically permitted command injection and system takeover.