Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
added 2026/08/31 8:44 a.m.9 views

CVE-2026-71514

A flaw was found in NLTK. This path traversal vulnerability in the CrubadanCorpusReader component allows an attacker, who controls a corpus package, to disclose file contents outside the intended corpus directory. This occurs because a specially crafted input can bypass security checks, leading t...

3.3CVSS5.7AI score0.00162EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/22 3:31 p.m.7 views

GHSA-CV22-G7MW-8V73 NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

2.5CVSS5.9AI score0.00162EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/22 2:16 p.m.13 views

CVE-2026-71514

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

3.3CVSS0.00162EPSS
SaveExploits0References4
PyPA
PyPA
added 2026/08/22 2:16 p.m.8 views

PYSEC-2026-3790

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

3.3CVSS5.9AI score0.00162EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/22 2:16 p.m.6 views

PYSEC-2026-3790

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

3.3CVSS5.4AI score0.00162EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/22 2:16 p.m.9 views

CVE-2026-71514

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

3.3CVSS5.4AI score0.00162EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/22 2:16 p.m.5 views

UBUNTU-CVE-2026-71514

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

3.3CVSS5.5AI score0.00162EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/22 1:34 p.m.31 views

CVE-2026-71514 NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

2.5CVSS0.00162EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/22 1:34 p.m.11 views

EUVD-2026-64295

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

2.5CVSS5.5AI score0.00162EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/22 1:34 p.m.37 views

CVE-2026-71514

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader._load_lang_ngrams . The function joins the corpus root with a value read from the corpus table.txt mapping file and opens the result using the builtin open() instead of the pathsec -validated opener. Because...

3.3CVSS5.5AI score0.00162EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/08/22 1:34 p.m.19 views

CVE-2026-71514 NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...

2CVSS5.6AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-71514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0...

3.3CVSS6.2AI score0.00162EPSS
SaveExploits0References3
Rows per page
Query Builder