Stanza Unsafe Pickle Deserialization RCE in Model Loaders via Fallback

github.com 2026-07-09查看中文 →

Security AdvisoryCVE-2026-5499HighStanford NLP

Affected:

Stanza 1.12.1

Fixed in:

>= 1.12.2

Referenced CVEs: CVE-2026-54499 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

xxl-job-admin < 3.4.0 CSRF Vulnerability Allows Unauthorized Glue IDE Script Modification 2026-07-16 NanoMQ v0.24.9 Memory Leak DoS Vulnerability (CVE-2026-36590) with POC 2026-07-16 CVE-2026-36590: EMQ NanoMQ Memory Leak DoS Vulnerability Analysis and Fix 2026-07-16 Dulwich Git Library Truncated Delta Header Parsing Vulnerability 2026-07-16 Sandboxie GuiServer Unrestricted APC Injection Sandbox Escape (RCE) 2026-07-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive