- Latest release
- 3.0.0-M6 (Sep 12, 2026): no advisory affects it
- Newest unaffected release
- Every release is affected by at least one advisory
- Advisories
- 1 · 1 high
- Dependents
- 6
- Releases
- 5 since 3.0.0-M2 (Mar 24, 2026)
- Registry
- Maven Central
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-43825Affects 3.0.0-M2 to 3.0.0-M3 (3.0.0-M4 is outside it)
Advisories 1
- CVE-2026-43825High 7.3
Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel
Affected: from 3.0.0-M1, fixed in 3.0.0-M4.
Fixed in 3.0.0-M4 (released Jun 25, 2026, 11 days before disclosure).
The latest release, 3.0.0-M6, is not affected.