=== CVE-2026-43825 PoC === Label: fixed Marker path: /tmp/opennlp_poc_marker_fixed.txt [*] Crafted payload size: 88 bytes [*] Payload contains MaliciousGadget (not in SvmDoccatModel graph) [*] Calling SvmDoccatModel.deserialize() with malicious stream... [+] FIXED version: ObjectInputFilter rejected foreign class [+] Exception: java.io.InvalidClassException: filter status: REJECTED [*] No marker file found ? gadget code did NOT execute === RESULT === Label: fixed Exception type: InvalidClassException Code executed during deserialization: false VERDICT: FIXED ? ObjectInputFilter blocked the foreign class