New
v4.5.9 - Security Updates and Semgrex / Ssurgeon features
Security updates
- Removed the ability to specify an external library for deserialization of annotations in the server. We believe this should not be necessary given the complete nature of the protobuf format, and this was reported as a potential security vulnerability: https://github.com/stanfordnlp/CoreNLP/security/advisories/GHSA-wv35-hv9v-526p If it turns out someone has a use case for this feature, please file an issue on github.
- Remove the naturalli demo, which is unsupported and likely not used anywhere given its Stanford-specific components
Semgrex / Ssurgeon features
- Semgrex can now search on negated attributes of a node using
!:as the syntax: https://github.com/stanfordnlp/CoreNLP/pull/1486/commits/7399e9b4164be723693f4c0da2e26e86bae929af - Semgrex can now search on maps (especially morphological features) with the
:{feature:value}syntax, as well as search for negative matches with{feature!:value}: https://github.com/stanfordnlp/CoreNLP/pull/1486/commits/84ac9328e218d2e82ea953b0f03af06afd4a5bb4 https://github.com/stanfordnlp/CoreNLP/pull/1486/commits/ff1d903d620f1a7edebc954a585a9e1e0814799c https://github.com/stanfordnlp/CoreNLP/pull/1486/commits/3c30b3b8c98b87cbe70143ad74899d7e311731d5