CVE-2026-79675 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

CVE-2026-79675 vulnerabilities

Vulnerabilities for packages: open-webui...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-79675 via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-79675 Source advisory: OSV:GHSA-M4RF-3FR8-XWX3...

CVE-2026-79675

creationtimestamp| type| source ---|---|--- 2026-08-25 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7qg74h2u 2026-08-25 18:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfz2x7pl2e 2026-08-25 22:40:04+00:00| seen|...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-79675 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-79675 Source advisory: SNYK:PYTHON-NLTK-19313902...

DEBIAN-CVE-2026-79675

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...