Unauthenticated remote shutdown in nltk.app.wordnet_app

🗓️ 19 Mar 2026 12:42:20Reported by GitHub Advisory DatabaseType

Unauthenticated remote shutdown in nltk.app.wordnet_app enables DoS via GET /SHUTDOWN THE SERVER.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in NLTK bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage	17 Jun 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a missing authentication and cross-site Scripting in NLTK [CVE-2026-33230, CVE-2026-33231]	21 May 202614:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	19 May 202605:41	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	30 Jun 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to XSS (CVE-2026-33230), denial of service (CVE-2026-33231, GHSA-rf74-v2fm-23pw) and path traversal (CVE-2026-33236)	26 Mar 202616:02	–	ibm
ATTACKERKB	CVE-2026-33231	20 Mar 202622:45	–	attackerkb
Information Security Automation	April Linux Patch Wednesday	22 Apr 202616:00	–	avleonov
Chainguard	CVE-2026-33231 vulnerabilities	26 Mar 202601:17	–	cgr
Circl	CVE-2026-33231	18 Mar 202611:50	–	circl
CNNVD	NLTK 访问控制错误漏洞	20 Mar 202600:00	–	cnnvd

Vulners

Node

nltk nltkRange≤3.9.3pip

Source	Link
github	www.github.com/nltk/nltk/security/advisories/GHSA-jm6w-m3j8-898g
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-33231
github	www.github.com/nltk/nltk/commit/bbaae83db86a0f49e00f5b0db44a7254c268de9b
github	www.github.com/advisories/GHSA-jm6w-m3j8-898g

25 Apr 2026 01:23Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.00875

SSVC