annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-12259 +1 more via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-12259, CVE-2026-63310 Source advisory: OSV:GHSA-5WP5-5229-5G6Q...

CVE-2026-63310

creationtimestamp| type| source ---|---|--- 2026-08-22 15:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtomcl6cs52p 2026-08-22 16:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtont55gq22e 2026-08-23 04:30:27+00:00| seen|...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +797 more potentially affected by CVE-2026-12259 +1 more via nltk (>=3.0.0, <=3.9.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-12259, CVE-2026-63310 Source advisory: OSV:PYSEC-2026-3729...

DEBIAN-CVE-2026-63310

Bulletin has no description...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-12259 +1 more via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-12259, CVE-2026-63310 Source advisory: OSV:PYSEC-2026-3729...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-12259 +1 more via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-12259, CVE-2026-63310 Source advisory: OSV:PYSEC-2026-4318...