Search for packages
| purl | pkg:pypi/nltk@3.2.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2019-36
|
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot … |
Vulnerable |
|
PYSEC-2022-5
Aliases: CVE-2021-3842 GHSA-rqjh-jp2r-59cj |
nltk is vulnerable to Inefficient Regular Expression Complexity |
Vulnerable |
|
PYSEC-2019-106
Aliases: CVE-2019-14751 GHSA-mr7p-25v2-35wr |
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot … |
Vulnerable |
|
PYSEC-2021-859
Aliases: CVE-2021-43854 GHSA-f8m6-h2c7-8h9x |
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
Vulnerable |
|
PYSEC-2024-167
Aliases: CVE-2024-39705 GHSA-cgvx-9447-vcch |
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download … |
Vulnerable |
|
PYSEC-2021-356
Aliases: CVE-2021-3828 GHSA-2ww3-fxvq-293j |
nltk is vulnerable to Inefficient Regular Expression Complexity |
Vulnerable |
|
PYSEC-2026-98
Aliases: CVE-2026-0847 GHSA-68j8-pq59-fqgm |
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader … |
Vulnerable |
|
PYSEC-2026-97
Aliases: CVE-2026-0846 GHSA-h8wq-7xc4-p3qx |
A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to … | There are no reported fixed by versions. |
|
PYSEC-2026-99
Aliases: CVE-2026-0848 |
NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module … |
Vulnerable Vulnerable |
|
PYSEC-2026-96
Aliases: CVE-2025-14009 GHSA-7p94-766c-hgjp |
A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses … |
Vulnerable Vulnerable |
|
PYSEC-2026-2237
Aliases: CVE-2026-33236 GHSA-469j-vmhf-r6v7 |
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
Vulnerable |
|
PYSEC-2026-2236
Aliases: CVE-2026-33231 GHSA-jm6w-m3j8-898g |
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
Vulnerable |
|
PYSEC-2026-2235
Aliases: CVE-2026-33230 GHSA-gfwx-w7gr-fvh7 |
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
Vulnerable |
|
PYSEC-2026-2078
Aliases: CVE-2026-54293 GHSA-p4gq-832x-fm9v |
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
Vulnerable |
|
PYSEC-2026-3584
Aliases: CVE-2026-12074 GHSA-xh95-f55m-82fw |
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) … |
Vulnerable |
|
PYSEC-2026-3583
Aliases: CVE-2026-12075 GHSA-qvv7-cg9c-w4x3 |
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides … |
Vulnerable |
|
PYSEC-2026-3581
Aliases: CVE-2026-12072 GHSA-6hm5-jgcp-p838 |
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### … |
Vulnerable |
|
PYSEC-2026-3582
Aliases: CVE-2026-12061 GHSA-fg7f-2386-8897 |
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* … |
Vulnerable |
|
PYSEC-2026-3657
Aliases: CVE-2025-71408 GHSA-848c-c2cx-j7qx |
NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker … |
Vulnerable Vulnerable |
|
PYSEC-2026-597
Aliases: CVE-2026-12243 GHSA-m42h-3232-vpv3 |
NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504. The … | There are no reported fixed by versions. |
|
PYSEC-2026-3723
Aliases: CVE-2026-63311 GHSA-3gqm-fcw5-w839 |
NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. … |
Vulnerable |
|
PYSEC-2026-3722
Aliases: CVE-2026-62388 GHSA-p3m8-78j2-g5p3 |
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising … |
Vulnerable |
|
PYSEC-2026-3724
Aliases: CVE-2026-66393 GHSA-rf74-v2fm-23pw |
NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by … |
Vulnerable |
|
PYSEC-2026-3739
Aliases: CVE-2026-81724 GHSA-cw6x-m8jw-qmrh |
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service … |
Vulnerable |
|
PYSEC-2026-3728
Aliases: CVE-2026-62385 GHSA-568f-pv23-39p4 |
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files … |
Vulnerable |
|
PYSEC-2026-3733
Aliases: CVE-2026-78682 GHSA-6ww7-3frv-cqxh |
NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is … |
Vulnerable |
|
PYSEC-2026-3730
Aliases: CVE-2026-63312 GHSA-x5ph-mj9p-rfr8 |
NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead … |
Vulnerable |
|
PYSEC-2026-3732
Aliases: CVE-2026-70626 GHSA-r6gq-whwq-mvg9 |
NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside … |
Vulnerable |
|
PYSEC-2026-3734
Aliases: CVE-2026-78683 GHSA-rhp5-r9x4-f5g2 |
NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls … |
Vulnerable |
|
PYSEC-2026-3736
Aliases: CVE-2026-79674 GHSA-3gq4-3j92-5w49 |
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside … |
Vulnerable |
|
PYSEC-2026-3735
Aliases: CVE-2026-79657 GHSA-x99w-6fgc-pmfw |
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead … |
Vulnerable |
|
PYSEC-2026-3741
Aliases: CVE-2026-81727 GHSA-f794-5jv7-7672 |
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to … |
Vulnerable |
|
PYSEC-2026-3740
Aliases: CVE-2026-81726 GHSA-8mgp-746c-j5xp |
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations … |
Vulnerable |
|
PYSEC-2026-3737
Aliases: CVE-2026-79676 GHSA-p4rw-rvv2-7xwr |
NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead … |
Vulnerable |
|
PYSEC-2026-3738
Aliases: CVE-2026-81722 GHSA-ww6m-cw3f-q94g |
nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem(). The _is_consonant() helper … |
Vulnerable |
|
PYSEC-2026-3731
Aliases: CVE-2026-65915 GHSA-72r2-7mfr-5xr9 |
NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against … |
Vulnerable |
|
PYSEC-2026-3751
Aliases: CVE-2026-80206 GHSA-w3v8-gmh9-3wv7 |
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles … |
Vulnerable |
|
PYSEC-2026-3749
Aliases: CVE-2026-79675 GHSA-m4rf-3fr8-xwx3 |
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers … |
Vulnerable |
|
PYSEC-2026-3748
Aliases: CVE-2026-78681 GHSA-97qj-x29f-37w7 |
NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers … |
Vulnerable |
|
PYSEC-2026-3752
Aliases: CVE-2026-81725 GHSA-8mpw-7fpc-4gqj |
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU … |
Vulnerable |
|
PYSEC-2026-3750
Aliases: CVE-2026-80205 GHSA-rrv8-h7p8-rx55 |
NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that accept user-supplied … |
Vulnerable |
|
PYSEC-2026-3729
Aliases: CVE-2026-12259 CVE-2026-63310 GHSA-5wp5-5229-5g6q GHSA-gf32-cmjh-8m9v PYSEC-2026-4318 |
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can … |
Vulnerable Vulnerable |
|
PYSEC-2026-3869
Aliases: CVE-2026-12876 GHSA-ff5c-cp5c-9wjf |
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
Vulnerable |
|
PYSEC-2026-3868
Aliases: CVE-2026-78680 GHSA-6hwm-xvph-95vm |
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
Vulnerable |
|
PYSEC-2026-3870
Aliases: CVE-2026-72818 GHSA-qx2g-xrx7-vfh8 |
NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE … |
Vulnerable |
|
PYSEC-2026-3871
Aliases: CVE-2026-81723 GHSA-vp2x-qp44-57v7 |
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Summary `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block … |
Vulnerable |
|
PYSEC-2026-3954
Aliases: CVE-2026-12261 GHSA-ffj6-66c4-86gw |
A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package … |
Vulnerable Vulnerable |
|
PYSEC-2026-2085
Aliases: CVE-2026-12252 GHSA-9r6g-266r-89x4 |
In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted … |
Vulnerable Vulnerable |
|
PYSEC-2026-4318
Aliases: CVE-2026-12259 CVE-2026-63310 GHSA-5wp5-5229-5g6q GHSA-gf32-cmjh-8m9v PYSEC-2026-3729 |
In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 … | There are no reported fixed by versions. |
|
PYSEC-2026-3955
Aliases: CVE-2026-12372 GHSA-2jhm-w3mp-jcwr |
A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended … | There are no reported fixed by versions. |