From 9633c09618e5d5a1eb1ceec77c816587294bfb9d Mon Sep 17 00:00:00 2001 From: "Piotr P. Karwasz" Date: Tue, 25 Aug 2026 16:30:22 +0200 Subject: [PATCH 1/2] Add security model coordinates for Apache OpenNLP The OpenNLP security model is maintained in SECURITY.md in the apache/opennlp repository; the project's website security page points to it as the authoritative version. Assisted-By: Claude Fable 5 --- scripts/project-coordinates.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/project-coordinates.json b/scripts/project-coordinates.json index c5482802..cc659a44 100644 --- a/scripts/project-coordinates.json +++ b/scripts/project-coordinates.json @@ -1228,8 +1228,8 @@ }, "opennlp": { "name": "Apache OpenNLP", - "security_model_link": null, - "security_model_source": null, + "security_model_link": "https://github.com/apache/opennlp/security/policy", + "security_model_source": "https://raw.githubusercontent.com/apache/opennlp/main/SECURITY.md", "advisory_link": null, "contact": "security@apache.org", "logo_link": "https://www.apache.org/logos/res/opennlp/default.png" From 327f0ee65dab5e53c9253c10750c80ecf2a21654 Mon Sep 17 00:00:00 2001 From: "Piotr P. Karwasz" Date: Tue, 25 Aug 2026 19:52:22 +0200 Subject: [PATCH 2/2] Regenerate pages with OpenNLP security model link Assisted-By: Claude Fable 5 --- content/projects/_index.md | 2 ++ content/projects/opennlp/_index.md | 7 ++++++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/content/projects/_index.md b/content/projects/_index.md index 57565a75..2180dbe9 100644 --- a/content/projects/_index.md +++ b/content/projects/_index.md @@ -994,6 +994,8 @@ Use the tabs below to jump to projects by their initial. Every project lists a s [security@apache.org](mailto:security@apache.org?subject=OpenNLP) - Advisories (experimental):\ [security.apache.org](/projects/opennlp/) + - Security model: + - [Apache OpenNLP security model](https://github.com/apache/opennlp/security/policy) - **Apache OpenOffice** - **Security contact:**\ [security@openoffice.apache.org](mailto:security@openoffice.apache.org?subject=OpenOffice) diff --git a/content/projects/opennlp/_index.md b/content/projects/opennlp/_index.md index 8589b3a1..95c1b2f8 100644 --- a/content/projects/opennlp/_index.md +++ b/content/projects/opennlp/_index.md @@ -8,9 +8,14 @@ layout: single Do you want disclose a potential security issue for Apache OpenNLP? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=OpenNLP). +You can read more about the security policy on: + +- [Apache OpenNLP security model](https://github.com/apache/opennlp/security/policy) + + # Advisories -This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org) +This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org) {.bg-warning} ## Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML ## { #CVE-2026-63317 }