Search for packages
| purl | pkg:pypi/nltk@3.10.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-3739
Aliases: CVE-2026-81724 GHSA-cw6x-m8jw-qmrh |
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service … |
Vulnerable |
|
PYSEC-2026-3733
Aliases: CVE-2026-78682 GHSA-6ww7-3frv-cqxh |
NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is … |
Vulnerable |
|
PYSEC-2026-3736
Aliases: CVE-2026-79674 GHSA-3gq4-3j92-5w49 |
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside … |
Vulnerable |
|
PYSEC-2026-3735
Aliases: CVE-2026-79657 GHSA-x99w-6fgc-pmfw |
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead … |
Vulnerable |
|
PYSEC-2026-3741
Aliases: CVE-2026-81727 GHSA-f794-5jv7-7672 |
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to … |
Vulnerable |
|
PYSEC-2026-3740
Aliases: CVE-2026-81726 GHSA-8mgp-746c-j5xp |
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations … |
Vulnerable |
|
PYSEC-2026-3737
Aliases: CVE-2026-79676 GHSA-p4rw-rvv2-7xwr |
NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead … |
Vulnerable |
|
PYSEC-2026-3738
Aliases: CVE-2026-81722 GHSA-ww6m-cw3f-q94g |
nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem(). The _is_consonant() helper … |
Vulnerable |
|
GHSA-3h2g-j4wp-7qqq
|
Duplicate Advisory: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) ## Duplicate … | There are no reported fixed by versions. |
|
GHSA-54xp-3ww7-6wjg
|
Duplicate Advisory: Uncontrolled search path when invoking the Graphviz 'dot' binary (CWE-426/CWE-427) ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-m4rf-3fr8-xwx3
Aliases: CVE-2026-79675 |
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) ## Vulnerability The … |
Vulnerable |
|
GHSA-6hwm-xvph-95vm
Aliases: CVE-2026-78680 |
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
Vulnerable |
|
PYSEC-2026-3751
Aliases: CVE-2026-80206 GHSA-w3v8-gmh9-3wv7 |
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles … |
Vulnerable |
|
PYSEC-2026-3749
Aliases: CVE-2026-79675 GHSA-m4rf-3fr8-xwx3 |
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers … |
Vulnerable |
|
PYSEC-2026-3748
Aliases: CVE-2026-78681 GHSA-97qj-x29f-37w7 |
NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers … |
Vulnerable |
|
PYSEC-2026-3752
Aliases: CVE-2026-81725 GHSA-8mpw-7fpc-4gqj |
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU … |
Vulnerable |
|
GHSA-vp9c-2pjm-8925
|
Duplicate Advisory: Allowlisted pickle loaders still permit code execution in current source ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-hqv3-xm29-p9hq
|
Duplicate Advisory: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate … | There are no reported fixed by versions. |
|
GHSA-crp9-r7rq-c8cg
|
Duplicate Advisory: pathsec SSRF protection can be bypassed when a proxy is configured ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-3m7f-6hxv-6796
|
Duplicate Advisory: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-pf76-q698-37v8
|
Duplicate Advisory: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input ## Duplicate Advisory This advisory … | There are no reported fixed by versions. |
|
GHSA-4xw3-jf9x-x7mf
|
Duplicate Advisory: Downloader.download follows hardlinks and overwrites outside-root files ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
GHSA-jx89-3qg8-p2mr
|
Duplicate Advisory: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses (CWE-776) ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-8x48-8g7j-rqxp
|
Duplicate Advisory: Quadratic-time DoS in PorterStemmer via long runs of 'y' ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-rcw8-9qrw-27m2
|
Duplicate Advisory: NLTK: Corpus Reader Sandbox Bypass ## Duplicate Advisory This advisory has been withdrawn because it is a duplicate … | There are no reported fixed by versions. |
|
GHSA-vf76-f5cp-9846
|
Duplicate Advisory: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-w5q8-6jpp-4246
|
Duplicate Advisory: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-ww6m-cw3f-q94g
Aliases: CVE-2026-81722 |
NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y' `nltk.stem.PorterStemmer.stem()` -- a ubiquitous public API applied to arbitrary, often … |
Vulnerable |
|
GHSA-ff5c-cp5c-9wjf
Aliases: CVE-2026-12876 |
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
Vulnerable |
|
GHSA-cw6x-m8jw-qmrh
Aliases: CVE-2026-81724 |
NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input ### Summary `nltk.featstruct.FeatStructReader` (used by `FeatStruct(str)` … |
Vulnerable |
|
GHSA-vp2x-qp44-57v7
Aliases: CVE-2026-81723 |
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Summary `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block … |
Vulnerable |
|
GHSA-f794-5jv7-7672
Aliases: CVE-2026-81727 |
NLTK: Downloader.download follows hardlinks and overwrites outside-root files ### Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but … |
Vulnerable |
|
GHSA-8mpw-7fpc-4gqj
Aliases: CVE-2026-81725 |
NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks ### Summary `Pl196xCorpusReader` still parses whole TEI blocks with multiple lazy … |
Vulnerable |
|
GHSA-3gq4-3j92-5w49
Aliases: CVE-2026-79674 |
NLTK: Corpus Reader Sandbox Bypass ## Summary NLTK corpus-reader constructors can still reach outside-root file and database reads before the … |
Vulnerable |
|
GHSA-x99w-6fgc-pmfw
Aliases: CVE-2026-79657 |
NLTK: Allowlisted pickle loaders still permit code execution in current source ### Summary The current source tree still allows arbitrary … |
Vulnerable |
|
GHSA-p4rw-rvv2-7xwr
Aliases: CVE-2026-79676 |
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement ### Summary Several corpus readers still step outside NLTK's … |
Vulnerable |
|
GHSA-6ww7-3frv-cqxh
Aliases: CVE-2026-78682 |
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured ### Summary Current NLTK source reopens SSRF in … |
Vulnerable |
|
GHSA-97qj-x29f-37w7
Aliases: CVE-2026-78681 |
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses Several XML parsing sites in NLTK still used `xml.etree.ElementTree` directly, … |
Vulnerable |
|
GHSA-w3v8-gmh9-3wv7
Aliases: CVE-2026-80206 |
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions ### Summary The NLTK `tgrep` module accepts user-supplied regular expressions and … |
Vulnerable |
|
PYSEC-2026-3869
Aliases: CVE-2026-12876 GHSA-ff5c-cp5c-9wjf |
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
Vulnerable |
|
PYSEC-2026-3868
Aliases: CVE-2026-78680 GHSA-6hwm-xvph-95vm |
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
Vulnerable |
|
PYSEC-2026-3790
Aliases: CVE-2026-71514 GHSA-cv22-g7mw-8v73 |
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 … |
Vulnerable Vulnerable |
|
PYSEC-2026-3867
Aliases: CVE-2026-71513 GHSA-5gh2-94qg-qppq |
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler … |
Vulnerable |
|
PYSEC-2026-3871
Aliases: CVE-2026-81723 GHSA-vp2x-qp44-57v7 |
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Summary `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-0000-CVE-2026-62383
|
nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers … |
CVE-2026-62383
GHSA-3hhw-38pf-pxj6 PYSEC-2026-3726 |
|
PYSEC-2026-3789
|
NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside … |
CVE-2026-62384
GHSA-f833-7jw8-xwrv |
|
GHSA-3hhw-38pf-pxj6
|
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely ## Summary `IPIPANCorpusReader` (`nltk/corpus/reader/ipipan.py`) exposes public methods, `channels()`, `domains()`, `categories()`, … |
CVE-2026-62383
|
|
GHSA-f833-7jw8-xwrv
|
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292) This is a **new, distinct vulnerability**: a bypass of … |
CVE-2026-62384
|