Search for packages
| purl | pkg:pypi/nltk@3.10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-0000-CVE-2026-62383
Aliases: CVE-2026-62383 GHSA-3hhw-38pf-pxj6 PYSEC-2026-3726 |
nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers … |
Vulnerable |
|
PYSEC-2026-3739
Aliases: CVE-2026-81724 GHSA-cw6x-m8jw-qmrh |
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service … |
Vulnerable |
|
PYSEC-2026-3733
Aliases: CVE-2026-78682 GHSA-6ww7-3frv-cqxh |
NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is … |
Vulnerable |
|
PYSEC-2026-3736
Aliases: CVE-2026-79674 GHSA-3gq4-3j92-5w49 |
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside … |
Vulnerable |
|
PYSEC-2026-3735
Aliases: CVE-2026-79657 GHSA-x99w-6fgc-pmfw |
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead … |
Vulnerable |
|
PYSEC-2026-3741
Aliases: CVE-2026-81727 GHSA-f794-5jv7-7672 |
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to … |
Vulnerable |
|
PYSEC-2026-3740
Aliases: CVE-2026-81726 GHSA-8mgp-746c-j5xp |
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations … |
Vulnerable |
|
PYSEC-2026-3737
Aliases: CVE-2026-79676 GHSA-p4rw-rvv2-7xwr |
NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead … |
Vulnerable |
|
PYSEC-2026-3738
Aliases: CVE-2026-81722 GHSA-ww6m-cw3f-q94g |
nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem(). The _is_consonant() helper … |
Vulnerable |
|
PYSEC-2026-3751
Aliases: CVE-2026-80206 GHSA-w3v8-gmh9-3wv7 |
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles … |
Vulnerable |
|
PYSEC-2026-3749
Aliases: CVE-2026-79675 GHSA-m4rf-3fr8-xwx3 |
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers … |
Vulnerable |
|
PYSEC-2026-3748
Aliases: CVE-2026-78681 GHSA-97qj-x29f-37w7 |
NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers … |
Vulnerable |
|
PYSEC-2026-3752
Aliases: CVE-2026-81725 GHSA-8mpw-7fpc-4gqj |
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU … |
Vulnerable |
|
GHSA-5gh2-94qg-qppq
Aliases: CVE-2026-71513 |
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler … |
Vulnerable |
|
PYSEC-2026-3789
Aliases: CVE-2026-62384 GHSA-f833-7jw8-xwrv |
NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside … |
Vulnerable |
|
GHSA-3hhw-38pf-pxj6
Aliases: CVE-2026-62383 |
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely ## Summary `IPIPANCorpusReader` (`nltk/corpus/reader/ipipan.py`) exposes public methods, `channels()`, `domains()`, `categories()`, … |
Vulnerable |
|
GHSA-f833-7jw8-xwrv
Aliases: CVE-2026-62384 |
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292) This is a **new, distinct vulnerability**: a bypass of … |
Vulnerable |
|
PYSEC-2026-3869
Aliases: CVE-2026-12876 GHSA-ff5c-cp5c-9wjf |
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
Vulnerable |
|
PYSEC-2026-3868
Aliases: CVE-2026-78680 GHSA-6hwm-xvph-95vm |
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
Vulnerable |
|
PYSEC-2026-3790
Aliases: CVE-2026-71514 GHSA-cv22-g7mw-8v73 |
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 … |
Vulnerable Vulnerable |
|
PYSEC-2026-3870
Aliases: CVE-2026-72818 GHSA-qx2g-xrx7-vfh8 |
NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE … |
Vulnerable |
|
PYSEC-2026-3867
Aliases: CVE-2026-71513 GHSA-5gh2-94qg-qppq |
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler … |
Vulnerable |
|
PYSEC-2026-3871
Aliases: CVE-2026-81723 GHSA-vp2x-qp44-57v7 |
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Summary `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block … |
Vulnerable |
|
GHSA-343m-9fqq-97c7
|
Duplicate Advisory: NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-qq3h-cgj8-w3fx
|
Duplicate Advisory: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292) ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-p4gq-832x-fm9v
|
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read ### Summary nltk.data.load() in NLTK is … |
CVE-2026-54293
|
|
CVE-2026-54293
|
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read nltk.data.load() in NLTK is vulnerable to … |
GHSA-p4gq-832x-fm9v
|
|
PYSEC-2026-2078
|
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
CVE-2026-54293
GHSA-p4gq-832x-fm9v |
|
PYSEC-2026-3584
|
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) … |
CVE-2026-12074
GHSA-xh95-f55m-82fw |
|
PYSEC-2026-3583
|
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides … |
CVE-2026-12075
GHSA-qvv7-cg9c-w4x3 |
|
PYSEC-2026-3581
|
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### … |
CVE-2026-12072
GHSA-6hm5-jgcp-p838 |
|
PYSEC-2026-3582
|
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* … |
CVE-2026-12061
GHSA-fg7f-2386-8897 |
|
PYSEC-2026-3723
|
NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. … |
CVE-2026-63311
GHSA-3gqm-fcw5-w839 |
|
PYSEC-2026-3722
|
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising … |
CVE-2026-62388
GHSA-p3m8-78j2-g5p3 |
|
GHSA-6hm5-jgcp-p838
|
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### … |
CVE-2026-12072
|
|
GHSA-fg7f-2386-8897
|
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* … |
CVE-2026-12061
|
|
GHSA-qvv7-cg9c-w4x3
|
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides … |
CVE-2026-12075
|
|
GHSA-xh95-f55m-82fw
|
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) … |
CVE-2026-12074
|
|
GHSA-m42h-3232-vpv3
|
nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences # Summary nltk.data.load() and nltk.data.find() resolve user-supplied resource … |
CVE-2026-12243
|
|
CVE-2026-12074
|
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) … |
GHSA-xh95-f55m-82fw
|
|
CVE-2026-12061
|
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex `ReviewsCorpusReader` extracts feature annotations of the form *label* followed by … |
GHSA-fg7f-2386-8897
|
|
CVE-2026-12072
|
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) A … |
GHSA-6hm5-jgcp-p838
|
|
CVE-2026-12075
|
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode `nltk.pathsec` provides an SSRF … |
GHSA-qvv7-cg9c-w4x3
|
|
PYSEC-2026-3728
|
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files … |
CVE-2026-62385
GHSA-568f-pv23-39p4 |
|
PYSEC-2026-3730
|
NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead … |
CVE-2026-63312
GHSA-x5ph-mj9p-rfr8 |
|
PYSEC-2026-3734
|
NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls … |
CVE-2026-78683
GHSA-rhp5-r9x4-f5g2 |
|
PYSEC-2026-3731
|
NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against … |
CVE-2026-65915
GHSA-72r2-7mfr-5xr9 |
|
PYSEC-2026-3750
|
NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that accept user-supplied … |
CVE-2026-80205
GHSA-rrv8-h7p8-rx55 |
|
GHSA-p3m8-78j2-g5p3
|
NLTK: Default ENFORCE=False Disables All pathsec Security Controls NLTK's pathsec.py security module defaults to ENFORCE=False (line 24), which means all … |
CVE-2026-62388
|
|
GHSA-3gqm-fcw5-w839
|
NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure There is an SSRF vulnerability in NLTK 3.9.4's network URL validation. … |
CVE-2026-63311
|
|
GHSA-72r2-7mfr-5xr9
|
NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol ### Summary There's a logic bug … |
CVE-2026-65915
|
|
GHSA-568f-pv23-39p4
|
NLTK: Stable FrameNet and NKJP readers parse outside-root XML ### Summary Published `nltk==3.9.4` still contains several XML-reader entrypoints that build … |
CVE-2026-62385
|
|
GHSA-rhp5-r9x4-f5g2
|
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution ## Summary The NLTK library's `TransitionParser.parse()` method deserializes model files … |
CVE-2026-78683
|
|
GHSA-x5ph-mj9p-rfr8
|
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read ## Summary Setting `nltk.pathsec.ENFORCE = True` is documented to sandbox all … |
CVE-2026-63312
|
|
GHSA-rrv8-h7p8-rx55
|
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions ### Summary NLTK's `Text.findall()` and `TokenSearcher.findall()` methods accept user-supplied regular expressions … |
CVE-2026-80205
|
|
GHSA-ffj6-66c4-86gw
|
NLTK downloader allows cross-package resource and model poisoning A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package … |
CVE-2026-12261
|
|
GHSA-2jhm-w3mp-jcwr
|
NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk … |
CVE-2026-12372
|
|
CVE-2026-63311
|
NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure There is an SSRF vulnerability in NLTK 3.9.4's network URL validation. … |
GHSA-3gqm-fcw5-w839
|
|
CVE-2026-62388
|
NLTK: Default ENFORCE=False Disables All pathsec Security Controls NLTK's pathsec.py security module defaults to ENFORCE=False (line 24), which means all … |
GHSA-p3m8-78j2-g5p3
|
|
CVE-2026-62385
|
NLTK: Stable FrameNet and NKJP readers parse outside-root XML Published `nltk==3.9.4` still contains several XML-reader entrypoints that build parser paths … |
GHSA-568f-pv23-39p4
|
|
CVE-2026-78683
|
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution The NLTK library's `TransitionParser.parse()` method deserializes model files using `pickle_load()` … |
GHSA-rhp5-r9x4-f5g2
|
|
CVE-2026-80205
|
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions NLTK's `Text.findall()` and `TokenSearcher.findall()` methods accept user-supplied regular expressions and pass … |
GHSA-rrv8-h7p8-rx55
|
|
CVE-2026-65915
|
NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol There's a logic bug in `FileSystemPathPointer.open()` … |
GHSA-72r2-7mfr-5xr9
|
|
CVE-2026-63312
|
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read Setting `nltk.pathsec.ENFORCE = True` is documented to sandbox all file access … |
GHSA-x5ph-mj9p-rfr8
|
|
PYSEC-2026-3954
|
A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package … |
CVE-2026-12261
GHSA-ffj6-66c4-86gw |