The Apache OpenNLP team is pleased to announce the release of Apache OpenNLP 1.9.5.
The Apache OpenNLP library is a machine learning based toolkit for the processing of natural language text.
It supports the most common NLP tasks, such as tokenization, sentence segmentation, part-of-speech tagging, named entity extraction, chunking, parsing, and coreference resolution.
Apache OpenNLP 1.9.5 binary and source distributions are available from the Apache archive.
The OpenNLP library is distributed by Maven Central as well. See the Maven dependency page for more details.
This is a maintenance release on the 1.9.x line. It addresses several security vulnerabilities affecting Apache Lucene 8.x and Apache Solr 8.x, which depend on OpenNLP 1.9.x.
DictionaryEntryPersistor now parses XML through the hardened XmlUtil helper (OPENNLP-1819)
ExtensionLoader is now restricted to allowlisted package prefixes (OPENNLP-1820)
AbstractModelReader now guards against oversized array allocation from a crafted model (OPENNLP-1821, OPENNLP-1826)
Unsupported XML parser hardening options are now tolerated instead of failing (OPENNLP-1835)
Update Apache UIMA uimaj-core to 3.3.1
Update Morfologik to 2.1.9
Update the Jersey/GlassFish dependency to address CVE-2021-28168
Update test-scope JUnit to 4.13.1 and Commons IO to 2.7
For background on this release, see the discussion on the dev mailing list.
|
Note
|
Apache OpenNLP 1.9.5 is the final release of the 1.9.x line. See the end of life announcement for details. |
--The Apache OpenNLP Team
18 June 2026