Vulnerabilities
Last updated 33 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
nltk
|
NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection | Medium Risk 5.3 | 1 month ago | 3 hours ago |
|
nltk
|
No summary available | Medium Risk 6.5 | 1 month ago | 3 hours ago |
|
nltk
|
No summary available | Medium Risk 6.5 | 2 months ago | 3 hours ago |
|
nltk
|
No summary available | High Risk 7.8 | 3 months ago | 23 hours ago |
|
nltk
|
No summary available | Medium Risk 6.5 | 2 months ago | 23 hours ago |
|
nltk
|
No summary available | Low Risk 3.7 | 2 months ago | 23 hours ago |
|
nltk
|
NLTK downloader allows cross-package resource and model poisoning | Medium Risk 5.3 | 2 months ago | 13 days ago |
|
nltk
|
NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts | Low Risk 3.7 | 2 months ago | 13 days ago |
|
nltk
|
NLTK Stanford wrapper classes execute untrusted JAR files without verification | High Risk 7.8 | 3 months ago | 13 days ago |
|
nltk
|
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars | Medium Risk 6.0 | 1 month ago | 1 month ago |
|
nltk
|
NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking | High Risk 7.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` | Low Risk 3.7 | 1 month ago | 1 month ago |
|
nltk
|
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution | High Risk 8.8 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary | High Risk 7.8 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars | Unknown | 1 month ago | 1 month ago |
|
nltk
|
NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking | High Risk 7.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` | Low Risk 3.7 | 1 month ago | 1 month ago |
|
nltk
|
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution | High Risk 8.8 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary | High Risk 7.8 | 1 month ago | 1 month ago |
|
nltk
|
No summary available | Low Risk 3.3 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input | Medium Risk 5.3 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Downloader.download follows hardlinks and overwrites outside-root files | High Risk 7.1 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) | Critical 9.8 | 1 month ago | 1 month ago |
|
nltk
|
NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure | Low Risk 2.5 | 1 month ago | 1 month ago |
|
nltk
|
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) | High Risk 7.5 | 2 months ago | 1 month ago |
|
nltk
|
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read | High Risk 7.5 | 4 months ago | 1 month ago |
|
nltk
|
NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y' | Medium Risk 6.0 | 1 month ago | 1 month ago |
|
nltk
|
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode | High Risk 8.6 | 2 months ago | 1 month ago |
|
nltk
|
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) | High Risk 7.5 | 2 months ago | 1 month ago |
|
nltk
|
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex | High Risk 7.5 | 2 months ago | 1 month ago |
|
nltk
|
Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS | Medium Risk 6.0 | 7 months ago | 1 month ago |
|
nltk
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk | Medium Risk 6.1 | 7 months ago | 1 month ago |
|
nltk
|
Unauthenticated remote shutdown in nltk.app.wordnet_app | High Risk 7.5 | 7 months ago | 1 month ago |
|
nltk
|
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite | High Risk 8.1 | 7 months ago | 1 month ago |
|
nltk
|
NLTK has a Zip Slip Vulnerability | Critical 10.0 | 7 months ago | 1 month ago |
|
nltk
|
ntlk unsafe deserialization vulnerability | High Risk 7.5 | 2 years ago | 1 month ago |
|
nltk
|
NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks | Medium Risk 6.0 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions | High Risk 7.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions | High Risk 8.0 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Corpus Reader Sandbox Bypass | High Risk 8.0 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement | High Risk 8.0 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Allowlisted pickle loaders still permit code execution in current source | Critical 9.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured | High Risk 8.0 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses | High Risk 8.0 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution | Critical 9.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely | Medium Risk 5.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Stable FrameNet and NKJP readers parse outside-root XML | Medium Risk 5.9 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292) | High Risk 7.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
nltk
|
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read | High Risk 8.0 | 1 month ago | 1 month ago |
Page 1