CVE-2026-63310

creationtimestamp| type| source ---|---|--- 2026-08-22 15:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtomcl6cs52p 2026-08-22 16:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtont55gq22e 2026-08-23 04:30:27+00:00| seen|...

DEBIAN-CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...