Security update for python-nltk (important)

🗓️ 27 Mar 2026 00:00:00Reported by OpenSuseType

Security update for python-nltk fixes three CVEs: XSS in lookup route, remote shutdown of WordNet Browser, and index server path traversal

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in NLTK bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage	17 Jun 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in NLTK [CVE-2026-33236]	21 May 202615:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a missing authentication and cross-site Scripting in NLTK [CVE-2026-33230, CVE-2026-33231]	21 May 202614:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	19 May 202605:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	8 Jun 202607:11	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	30 Jun 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to XSS (CVE-2026-33230), denial of service (CVE-2026-33231, GHSA-rf74-v2fm-23pw) and path traversal (CVE-2026-33236)	26 Mar 202616:02	–	ibm
ATTACKERKB	CVE-2026-33230	20 Mar 202622:43	–	attackerkb
ATTACKERKB	CVE-2026-33231	20 Mar 202622:45	–	attackerkb
ATTACKERKB	CVE-2026-33236	20 Mar 202622:47	–	attackerkb

OS	OS Version	Architecture	Package	Package Version	Filename
opensuse backports	15	noarch	python3-nltk-3.7-bp157.3.9.1.noarch.rpm	3.7	python3-nltk

27 Mar 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.1

EPSS0.00875

SSVC