CVE-2026-59974 | Stanford NLP Stanza up to 1.13.x Unzip common.py stanza.resources.common.unzip path traversal

September 16, 2026 Yanac

A vulnerability has been found in Stanford NLP Stanza up to 1.13.x and classified as critical. The impacted element is the function stanza.resources.common.unzip of the file stanza/resources/common.py of the component Unzip. Performing a manipulation results in path traversal.

This vulnerability is reported as CVE-2026-59974. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More