AllenNLP vulnerabilities

CVEs whose affected-version data names the AllenNLP package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116275Medium· 6.3PoC

today

AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection

A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Registrable.resolve_class_name of the file allennlp/common/registrable.py of the component Registrable Configuration Machinery. Performing a manipulati…

▾ TwilightAllenAI · AllenNLPvia CVEORG