THREAT OPS › Threat News › CVE-2026-67211: Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer
CVE-2026-67211: Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer
<p>Posted by Richard Zowalla on Sep 11</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache OpenNLP (org.apache.opennlp:opennlp-symspell) 3.0.0-M4 before 3.0.0-M6<br /> <br /> Description:<br /> <br /> OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer<br /> <br /> Versions Affected: <br /> <br /> - 3.0.0-M4<br /> - 3.0.0-M5<br /> <
Indicators of compromise
- CVE-2026-67211cve
Original source: https://seclists.org/oss-sec/2026/q3/721