hankcs vulnerabilities

Products

• hanlp 2

Latest hankcs CVEs

Newest publication first

1. CVE-2026-112081 hankcs HanLP Model Config Loading reflection.py hanlp.load deserialization

   Published 2026-10-19

   Medium·CVSS 5.3 EPSS 0.34%

   A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes deserialization. It is po...

2. CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization

   Published 2026-10-19

   Medium·CVSS 5.3 EPSS 0.26%

   A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carr...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.