High 7.8Published Sep 16, 2026

CVE-2026-59974Stanza: Zip Slip Path Traversal in Model/Resource Extraction

Updated under an hour ago (2026-10-19 07:20 UTC)

Does this affect you?

It affects stanfordnlp stanza. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for stanfordnlp stanza

Exploited in the last 30 days

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating member paths, and the vulnerable extraction path is reachable through stanza.download and stanza.install_corenlp. A malicious archive containing parent-directory traversal entries can write outside the intended model directory, allowing files writable by the Stanza process to be overwritten and potentially enabling code execution through modified shell configuration, SSH authorization data, Python packages, or executable scripts. This issue is fixed in version 1.14.0.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-22
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: GitHub_M
NVD analysis: Awaiting Analysis
Record last updated: Sep 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

stanfordnlp stanza stanfordnlp:stanza (from the name)	before 1.14.0	CNA record

References

https://github.com/stanfordnlp/stanza/security/advisories/GHSA-2fwf-f686-7p34x-refsource-confirm
https://github.com/stanfordnlp/stanza/commit/a7085e75abdf35f277754dda472bba4e6819bcbbx-refsource-misc
https://github.com/stanfordnlp/stanza/releases/tag/v1.14.0x-refsource-misc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.