Please report any new security vulnerabilities on our github: https://github.com/stanfordnlp/stanza/security/advisories?state=Triage
Repository navigation
Security: stanfordnlp/stanza
Security
SECURITY.md
-
RCE via pickle deserialization in the lemmatizerGHSA-gh9r-c94j-cmp5 published
Oct 1, 2026 by AngledLuffaHigh -
Zip Slip Path Traversal in Model/Resource ExtractionGHSA-2fwf-f686-7p34 published
Jul 15, 2026 by AngledLuffaHigh -
Command Injection via shell=True in make_lm_data.pyGHSA-c9h2-qmqw-qf6h published
Oct 1, 2026 by AngledLuffaHigh -
Remote Code Execution via Unsafe Pickle Deserialization in Model LoadersGHSA-v5jw-96jm-7h2c published
Jun 18, 2026 by AngledLuffaHigh
Learn more about advisories related to stanfordnlp/stanza in the GitHub Advisory Database