stanza
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting stanzapage 1 of 1
- CVE-2026-115878HIGHCVSS 7.8EG 7.8fixed in 1.15.02026-11-03
vulnerable: 1.14.0
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stan…
- CVE-2026-54499HIGHCVSS 7.5EG 7.5fixed in 1.12.22026-06-19
vulnerable: 0.3 ... 1.9.2 (30 versions)
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load() attempt torch.load(..., …
Check whether stanza is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for stanza CVEs against the assets you own.
Book a Demo →