CVE-2026-81727 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-81727 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-81727

creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:44+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-f794-5jv7-7672...

DEBIAN-CVE-2026-81727

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...