CVE-2026-82617

The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX_NAME_FINDER.EMAIL and…

Opennlp

The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX_NAME_FINDER.EMAIL and DEFAULT_REGEX_NAME_FINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through RegexNameFinderFactory.getDefaultRegexNameFinders(...) and then applies them to untrusted text through RegexNameFinder.find(String[]) or RegexNameFinder.find(String) can be driven into super-linear backtracking or into…

11. Sep 2026

Ausgewertete Quellen

• Hersteller
  https://lists.apache.org/thread/spzhcxxszqdpppg70m1zz2l3mv29mhl3
• Hinweis
  http://www.openwall.com/lists/oss-security/2026/09/11/10
• NVD
  CVE-2026-82617