CVE-2026-0847

CVE-2026-0847 — Clases Múltiples de CorpusReader en NLTK: Lectura Arbitraria de Archivos mediante Path Traversal -orange?style=for-the-badge Descripción General...

PYSEC-2026-98

A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitize or validate file paths, enabling...