CVE-2026-81722 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-81722 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-81722

creationtimestamp| type| source ---|---|--- 2026-08-27 18:02:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3gl463rh24 2026-09-01 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhigb2dl62x 2026-09-02 16:35:42+00:00| published-proof-of-concept|...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81722 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81722 Source advisory: OSV:PYSEC-2026-3738...

DEBIAN-CVE-2026-81722

nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem. The isconsonant helper walks backward over the entire run of trailing 'y' characters on every call, and measure invokes it for each stem position, causin...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-81722 via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-81722 Source advisory: OSV:PYSEC-2026-3738...