GHSA-CGVX-9447-VCCH ntlk unsafe deserialization vulnerability

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

CVE-2024-39705 vulnerabilities

Vulnerabilities for packages: py3-nltk...

CVE-2024-39705 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, nemo, py3-nltk...

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

CVE-2024-39705

CVE-2024-39705 affects the Natural Language Toolkit (NLTK) up to version 3.8.1, enabling remote code execution when untrusted packages contain pickled Python code and the data package download feature is used. Affected in-core components cited include averaged_perceptron_tagger and punkt. Remedia...

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

OPENSUSE-SU-2024:11241-1 python36-nltk-3.5-1.10 on GA media

These are all security issues fixed in the python36-nltk-3.5-1.10 package on the GA media of openSUSE Tumbleweed...

PT-2024-6156 · Nltk +2 · Nltk +2

Name of the Vulnerable Software and Affected Versions: NLTK versions 3.8.1 and earlier Description: The issue is related to the nltk.download function in the NLTK library, which can lead to remote code execution when untrusted packages containing pickled Python code are downloaded. This...

Mageia: Security Advisory (MGASA-2023-0302)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-nltk package fixes a security vulnerability

python-nltk 3.6.6 update resolves ReDoS opportunity by fixing incorrectly specified regex...

MGASA-2023-0302 Updated python-nltk package fixes a security vulnerability

python-nltk 3.6.6 update resolves ReDoS opportunity by fixing incorrectly specified regex...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : NLTK vulnerability (USN-5215-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5215-1 advisory. Srikantha Prathi discovered that NLTK incorrectly handled specially crafted input. An attacker could use this vulnerability to cause a...

SUSE CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

SUSE CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

SUSE CVE-2021-43854

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

Ubuntu: Security Advisory (USN-5215-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...