HanLP vulnerabilities
CVEs whose affected-version data names the HanLP package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112079Medium· 6.3hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization
A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deseria…
▾ Sunlithankcs · HanLPvia CVEORG
CVE-2026-112081Medium· 6.3hankcs HanLP Model Config Loading reflection.py hanlp.load deserialization
A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the component Model Config Loading. This manipulation of the argument…
▾ Sunlithankcs · HanLPvia CVEORG