Search for packages
| purl | pkg:pypi/nltk@3.9.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-p4gq-832x-fm9v
Aliases: CVE-2026-54293 |
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read ### Summary nltk.data.load() in NLTK is … |
Vulnerable Vulnerable |
|
PYSEC-2026-2078
Aliases: CVE-2026-54293 GHSA-p4gq-832x-fm9v |
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
Vulnerable |
|
PYSEC-2026-3584
Aliases: CVE-2026-12074 GHSA-xh95-f55m-82fw |
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) … |
Vulnerable |
|
PYSEC-2026-3583
Aliases: CVE-2026-12075 GHSA-qvv7-cg9c-w4x3 |
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides … |
Vulnerable |
|
PYSEC-2026-3581
Aliases: CVE-2026-12072 GHSA-6hm5-jgcp-p838 |
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### … |
Vulnerable |
|
PYSEC-2026-3582
Aliases: CVE-2026-12061 GHSA-fg7f-2386-8897 |
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* … |
Vulnerable |
|
PYSEC-2026-597
Aliases: CVE-2026-12243 GHSA-m42h-3232-vpv3 |
NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504. The … | There are no reported fixed by versions. |
|
PYSEC-2026-3723
Aliases: CVE-2026-63311 GHSA-3gqm-fcw5-w839 |
NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. … |
Vulnerable |
|
PYSEC-2026-3722
Aliases: CVE-2026-62388 GHSA-p3m8-78j2-g5p3 |
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising … |
Vulnerable |
|
GHSA-6hm5-jgcp-p838
Aliases: CVE-2026-12072 |
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### … |
Vulnerable |
|
GHSA-fg7f-2386-8897
Aliases: CVE-2026-12061 |
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* … |
Vulnerable |
|
GHSA-qvv7-cg9c-w4x3
Aliases: CVE-2026-12075 |
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides … |
Vulnerable |
|
GHSA-xh95-f55m-82fw
Aliases: CVE-2026-12074 |
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) … |
Vulnerable |
|
PYSEC-2026-3739
Aliases: CVE-2026-81724 GHSA-cw6x-m8jw-qmrh |
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service … |
Vulnerable |
|
PYSEC-2026-3728
Aliases: CVE-2026-62385 GHSA-568f-pv23-39p4 |
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files … |
Vulnerable |
|
PYSEC-2026-3733
Aliases: CVE-2026-78682 GHSA-6ww7-3frv-cqxh |
NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is … |
Vulnerable |
|
PYSEC-2026-3730
Aliases: CVE-2026-63312 GHSA-x5ph-mj9p-rfr8 |
NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead … |
Vulnerable |
|
PYSEC-2026-3734
Aliases: CVE-2026-78683 GHSA-rhp5-r9x4-f5g2 |
NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls … |
Vulnerable |
|
PYSEC-2026-3736
Aliases: CVE-2026-79674 GHSA-3gq4-3j92-5w49 |
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside … |
Vulnerable |
|
PYSEC-2026-3735
Aliases: CVE-2026-79657 GHSA-x99w-6fgc-pmfw |
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead … |
Vulnerable |
|
PYSEC-2026-3741
Aliases: CVE-2026-81727 GHSA-f794-5jv7-7672 |
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to … |
Vulnerable |
|
PYSEC-2026-3740
Aliases: CVE-2026-81726 GHSA-8mgp-746c-j5xp |
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations … |
Vulnerable |
|
PYSEC-2026-3737
Aliases: CVE-2026-79676 GHSA-p4rw-rvv2-7xwr |
NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead … |
Vulnerable |
|
PYSEC-2026-3738
Aliases: CVE-2026-81722 GHSA-ww6m-cw3f-q94g |
nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem(). The _is_consonant() helper … |
Vulnerable |
|
PYSEC-2026-3731
Aliases: CVE-2026-65915 GHSA-72r2-7mfr-5xr9 |
NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against … |
Vulnerable |
|
PYSEC-2026-3751
Aliases: CVE-2026-80206 GHSA-w3v8-gmh9-3wv7 |
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles … |
Vulnerable |
|
PYSEC-2026-3749
Aliases: CVE-2026-79675 GHSA-m4rf-3fr8-xwx3 |
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers … |
Vulnerable |
|
PYSEC-2026-3748
Aliases: CVE-2026-78681 GHSA-97qj-x29f-37w7 |
NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers … |
Vulnerable |
|
PYSEC-2026-3752
Aliases: CVE-2026-81725 GHSA-8mpw-7fpc-4gqj |
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU … |
Vulnerable |
|
PYSEC-2026-3750
Aliases: CVE-2026-80205 GHSA-rrv8-h7p8-rx55 |
NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that accept user-supplied … |
Vulnerable |
|
GHSA-qg9p-xrhj-435m
|
Duplicate Advisory: nltk: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure ## Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-8vh5-mgjj-w6hg
|
Duplicate Advisory: [CWE-1188] Default ENFORCE=False Disables All pathsec Security Controls ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-gx65-c5hj-vpv5
|
Duplicate Advisory: [CWE-502] Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-cv22-g7mw-8v73
Aliases: CVE-2026-71514 |
NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams … |
Vulnerable |
|
GHSA-8w48-h75v-cxpv
|
Duplicate Advisory: Security Report: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-p3m8-78j2-g5p3
Aliases: CVE-2026-62388 |
NLTK: Default ENFORCE=False Disables All pathsec Security Controls NLTK's pathsec.py security module defaults to ENFORCE=False (line 24), which means all … |
Vulnerable |
|
GHSA-3gqm-fcw5-w839
Aliases: CVE-2026-63311 |
NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure There is an SSRF vulnerability in NLTK 3.9.4's network URL validation. … |
Vulnerable |
|
GHSA-2rrw-hpqm-36pv
|
Duplicate Advisory: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-qp76-pq9f-gr9m
|
Duplicate Advisory: Stable FrameNet and NKJP readers parse outside-root XML in 3.9.4 ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-568f-pv23-39p4
Aliases: CVE-2026-62385 |
NLTK: Stable FrameNet and NKJP readers parse outside-root XML ### Summary Published `nltk==3.9.4` still contains several XML-reader entrypoints that build … |
Vulnerable |
|
GHSA-rhp5-r9x4-f5g2
Aliases: CVE-2026-78683 |
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution ## Summary The NLTK library's `TransitionParser.parse()` method deserializes model files … |
Vulnerable |
|
GHSA-x5ph-mj9p-rfr8
Aliases: CVE-2026-63312 |
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read ## Summary Setting `nltk.pathsec.ENFORCE = True` is documented to sandbox all … |
Vulnerable |
|
GHSA-rrv8-h7p8-rx55
Aliases: CVE-2026-80205 |
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions ### Summary NLTK's `Text.findall()` and `TokenSearcher.findall()` methods accept user-supplied regular expressions … |
Vulnerable |
|
PYSEC-2026-3869
Aliases: CVE-2026-12876 GHSA-ff5c-cp5c-9wjf |
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars `nltk.parse.RecursiveDescentParser` (and `SteppingRecursiveDescentParser`) enumerate parses top-down with no bound … |
Vulnerable |
|
PYSEC-2026-3868
Aliases: CVE-2026-78680 GHSA-6hwm-xvph-95vm |
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary Two NLTK sites executed the Graphviz `dot` program by bare … |
Vulnerable |
|
PYSEC-2026-3790
Aliases: CVE-2026-71514 GHSA-cv22-g7mw-8v73 |
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 … |
Vulnerable Vulnerable |
|
PYSEC-2026-3870
Aliases: CVE-2026-72818 GHSA-qx2g-xrx7-vfh8 |
NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE … |
Vulnerable |
|
PYSEC-2026-3871
Aliases: CVE-2026-81723 GHSA-vp2x-qp44-57v7 |
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` ## Summary `XMLCorpusView._read_xml_fragment()` reads a corpus file in 1 KiB blocks, appending each block … |
Vulnerable |
|
PYSEC-2026-3954
Aliases: CVE-2026-12261 GHSA-ffj6-66c4-86gw |
A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package … |
Vulnerable Vulnerable |
|
PYSEC-2026-4318
Aliases: CVE-2026-12259 CVE-2026-63310 GHSA-5wp5-5229-5g6q GHSA-gf32-cmjh-8m9v PYSEC-2026-3729 |
In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 … | There are no reported fixed by versions. |
|
PYSEC-2026-3955
Aliases: CVE-2026-12372 GHSA-2jhm-w3mp-jcwr |
A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-jm6w-m3j8-898g
|
Unauthenticated remote shutdown in nltk.app.wordnet_app ### Summary `nltk.app.wordnet_app` allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when … |
CVE-2026-33231
|
|
GHSA-gfwx-w7gr-fvh7
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk ### Summary `nltk.app.wordnet_app` contains a reflected cross-site scripting … |
CVE-2026-33230
|
|
CVE-2026-33230
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk `nltk.app.wordnet_app` contains a reflected cross-site scripting issue in … |
GHSA-gfwx-w7gr-fvh7
|
|
CVE-2026-33231
|
Unauthenticated remote shutdown in nltk.app.wordnet_app `nltk.app.wordnet_app` allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is … |
GHSA-jm6w-m3j8-898g
|
|
PYSEC-2026-2237
|
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
CVE-2026-33236
GHSA-469j-vmhf-r6v7 |
|
PYSEC-2026-2236
|
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
CVE-2026-33231
GHSA-jm6w-m3j8-898g |
|
PYSEC-2026-2235
|
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development … |
CVE-2026-33230
GHSA-gfwx-w7gr-fvh7 |
|
PYSEC-2026-3724
|
NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by … |
CVE-2026-66393
GHSA-rf74-v2fm-23pw |
|
PYSEC-2026-3732
|
NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside … |
CVE-2026-70626
GHSA-r6gq-whwq-mvg9 |
|
GHSA-rf74-v2fm-23pw
|
Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS ### Summary `JSONTaggedDecoder.decode_obj()` in `nltk/jsontags.py` calls itself recursively … |
CVE-2026-66393
|
|
GHSA-rf74-v2fm-23pw
|
Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS `JSONTaggedDecoder.decode_obj()` in `nltk/jsontags.py` calls itself recursively without any … |
CVE-2026-66393
|
|
GHSA-r6gq-whwq-mvg9
|
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root ### Summary `nltk.corpus.reader.api.CorpusReader.open()` can be used … |
CVE-2026-70626
|
|
GHSA-9r6g-266r-89x4
|
NLTK Stanford wrapper classes execute untrusted JAR files without verification In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes … |
CVE-2026-12252
|
|
CVE-2026-70626
|
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root `nltk.corpus.reader.api.CorpusReader.open()` can be used to read … |
GHSA-r6gq-whwq-mvg9
|
|
PYSEC-2026-2085
|
In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted … |
CVE-2026-12252
GHSA-9r6g-266r-89x4 |
|
GHSA-469j-vmhf-r6v7
|
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite ## Vulnerability Description The NLTK downloader does not … |
CVE-2026-33236
|