Search for packages
| purl | pkg:pypi/nltk@3.10.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-hqj7-phwp-c3fp
|
Duplicate Advisory: Model-artifact APIs bypass pathsec and touch files outside allowed roots ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-j456-xh4h-cpf2
|
NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment ## Summary `WekaClassifier` in NLTK … |
Not vulnerable |
|
GHSA-8mgp-746c-j5xp
Aliases: CVE-2026-81726 |
NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots ### Summary Several model-artifact APIs still treat caller-controlled model … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2026-3739
|
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service … |
CVE-2026-81724
GHSA-cw6x-m8jw-qmrh |
|
PYSEC-2026-3733
|
NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is … |
CVE-2026-78682
GHSA-6ww7-3frv-cqxh |
|
PYSEC-2026-3736
|
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside … |
CVE-2026-79674
GHSA-3gq4-3j92-5w49 |
|
PYSEC-2026-3735
|
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead … |
CVE-2026-79657
GHSA-x99w-6fgc-pmfw |
|
PYSEC-2026-3741
|
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to … |
CVE-2026-81727
GHSA-f794-5jv7-7672 |
|
PYSEC-2026-3740
|
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations … |
CVE-2026-81726
GHSA-8mgp-746c-j5xp |
|
PYSEC-2026-3737
|
NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead … |
CVE-2026-79676
GHSA-p4rw-rvv2-7xwr |
|
PYSEC-2026-3738
|
nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem(). The _is_consonant() helper … |
CVE-2026-81722
GHSA-ww6m-cw3f-q94g |
|
GHSA-m4rf-3fr8-xwx3
|
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) ## Vulnerability The … |
CVE-2026-79675
|
|
GHSA-6hwm-xvph-95vm
|
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
CVE-2026-78680
|
|
PYSEC-2026-3751
|
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles … |
CVE-2026-80206
GHSA-w3v8-gmh9-3wv7 |
|
PYSEC-2026-3749
|
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers … |
CVE-2026-79675
GHSA-m4rf-3fr8-xwx3 |
|
PYSEC-2026-3748
|
NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers … |
CVE-2026-78681
GHSA-97qj-x29f-37w7 |
|
PYSEC-2026-3752
|
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU … |
CVE-2026-81725
GHSA-8mpw-7fpc-4gqj |
|
GHSA-5gh2-94qg-qppq
|
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler … |
CVE-2026-71513
|
|
GHSA-cv22-g7mw-8v73
|
NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams … |
CVE-2026-71514
|
|
GHSA-ww6m-cw3f-q94g
|
NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y' `nltk.stem.PorterStemmer.stem()` -- a ubiquitous public API applied to arbitrary, often … |
CVE-2026-81722
|
|
GHSA-ff5c-cp5c-9wjf
|
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
CVE-2026-12876
|
|
GHSA-cw6x-m8jw-qmrh
|
NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input ### Summary `nltk.featstruct.FeatStructReader` (used by `FeatStruct(str)` … |
CVE-2026-81724
|
|
GHSA-vp2x-qp44-57v7
|
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Summary `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block … |
CVE-2026-81723
|
|
GHSA-f794-5jv7-7672
|
NLTK: Downloader.download follows hardlinks and overwrites outside-root files ### Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but … |
CVE-2026-81727
|
|
GHSA-8mpw-7fpc-4gqj
|
NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks ### Summary `Pl196xCorpusReader` still parses whole TEI blocks with multiple lazy … |
CVE-2026-81725
|
|
GHSA-3gq4-3j92-5w49
|
NLTK: Corpus Reader Sandbox Bypass ## Summary NLTK corpus-reader constructors can still reach outside-root file and database reads before the … |
CVE-2026-79674
|
|
GHSA-x99w-6fgc-pmfw
|
NLTK: Allowlisted pickle loaders still permit code execution in current source ### Summary The current source tree still allows arbitrary … |
CVE-2026-79657
|
|
GHSA-p4rw-rvv2-7xwr
|
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement ### Summary Several corpus readers still step outside NLTK's … |
CVE-2026-79676
|
|
GHSA-6ww7-3frv-cqxh
|
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured ### Summary Current NLTK source reopens SSRF in … |
CVE-2026-78682
|
|
GHSA-97qj-x29f-37w7
|
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses Several XML parsing sites in NLTK still used `xml.etree.ElementTree` directly, … |
CVE-2026-78681
|
|
GHSA-w3v8-gmh9-3wv7
|
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions ### Summary The NLTK `tgrep` module accepts user-supplied regular expressions and … |
CVE-2026-80206
|
|
PYSEC-2026-3869
|
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
CVE-2026-12876
GHSA-ff5c-cp5c-9wjf |
|
PYSEC-2026-3868
|
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
CVE-2026-78680
GHSA-6hwm-xvph-95vm |
|
PYSEC-2026-3790
|
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 … |
CVE-2026-71514
GHSA-cv22-g7mw-8v73 |
|
PYSEC-2026-3867
|
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler … |
CVE-2026-71513
GHSA-5gh2-94qg-qppq |
|
PYSEC-2026-3871
|
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Summary `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block … |
CVE-2026-81723
GHSA-vp2x-qp44-57v7 |
|
CVE-2026-81727
|
NLTK: Downloader.download follows hardlinks and overwrites outside-root files NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still … |
GHSA-f794-5jv7-7672
|
|
CVE-2026-81722
|
NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y' `nltk.stem.PorterStemmer.stem()` -- a ubiquitous public API applied to arbitrary, often … |
GHSA-ww6m-cw3f-q94g
|
|
CVE-2026-81724
|
NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input `nltk.featstruct.FeatStructReader` (used by `FeatStruct(str)` and by … |
GHSA-cw6x-m8jw-qmrh
|
|
CVE-2026-12876
|
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
GHSA-ff5c-cp5c-9wjf
|
|
CVE-2026-78680
|
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
GHSA-6hwm-xvph-95vm
|
|
CVE-2026-81723
|
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block to a … |
GHSA-vp2x-qp44-57v7
|
|
CVE-2026-79675
|
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) An attacker who … |
GHSA-m4rf-3fr8-xwx3
|
|
CVE-2026-81725
|
NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks `Pl196xCorpusReader` still parses whole TEI blocks with multiple lazy regexes over … |
GHSA-8mpw-7fpc-4gqj
|
|
CVE-2026-78681
|
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses Several XML parsing sites in NLTK still used `xml.etree.ElementTree` directly, … |
GHSA-97qj-x29f-37w7
|
|
CVE-2026-80206
|
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions The NLTK `tgrep` module accepts user-supplied regular expressions and passes them … |
GHSA-w3v8-gmh9-3wv7
|
|
CVE-2026-78682
|
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured Current NLTK source reopens SSRF in proxied environments. … |
GHSA-6ww7-3frv-cqxh
|
|
CVE-2026-79676
|
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement Several corpus readers still step outside NLTK's symlink-aware trusted-root … |
GHSA-p4rw-rvv2-7xwr
|
|
CVE-2026-79674
|
NLTK: Corpus Reader Sandbox Bypass NLTK corpus-reader constructors can still reach outside-root file and database reads before the `nltk.pathsec` sandbox … |
GHSA-3gq4-3j92-5w49
|
|
CVE-2026-79657
|
NLTK: Allowlisted pickle loaders still permit code execution in current source The current source tree still allows arbitrary code execution … |
GHSA-x99w-6fgc-pmfw
|