CVE-2026-70626

creationtimestamp| type| source ---|---|--- 2026-09-08 16:35:14+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-r6gq-whwq-mvg9...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-70626 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-70626 Source advisory: OSV:PYSEC-2026-3732...

DEBIAN-CVE-2026-70626

NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open that allows local attackers to read arbitrary files outside the corpus root. The vulnerability exists because path validation is lexical and does not account for symlink resolution, enabling attackers to place...