1014 matches found
SUSE CVE-2026-79675
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
Symlink Path Traversal
NLTK is vulnerable to a symlink path traversal. The vulnerability is due to lexical path validation that does not account for symlink resolution, which allows a local attacker to place a symlink within the corpus root and access arbitrary files outside the intended corpus directory...
CVE-2026-79675
A flaw was found in NLTK. When processing untrusted input for its per-call options parameter in the java function, NLTK fails to validate Java Virtual Machine JVM options. A remote attacker could exploit this by injecting dangerous JVM flags, such as -agentpath or -javaagent, to achieve arbitrary...
CVE-2025-71408
A flaw was found in NLTK Natural Language Toolkit. This eval injection vulnerability in the nltk.collocations module allows a local attacker to execute arbitrary Python code. By manipulating command-line arguments when collocations.py is invoked directly, an attacker can bypass validation and...
CVE-2026-78682
A flaw was found in NLTK. When an HTTP proxy is configured, a server-side request forgery SSRF vulnerability exists in the nltk.pathsec.urlopen function. An attacker can exploit this by providing a seemingly valid public URL, which the proxy then forwards to an internal service without proper...
GHSA-CV2G-M8RR-888C vulnerabilities
Vulnerabilities for packages: py3-nltk, kubeflow-pipelines-visualization-server, open-webui...
CVE-2026-66393 vulnerabilities
Vulnerabilities for packages: py3-nltk, kubeflow-pipelines-visualization-server, open-webui...
Improper Security Control Configuration
NLTK is vulnerable to improper security control configuration. The vulnerability is due to ENFORCE=False being enabled by default in pathsec.py, which causes security validation functions to issue warnings instead of exceptions, allowing an attacker to bypass path traversal and pickle...
Path Traversal
NLTK is vulnerable to a path traversal. The vulnerability is due to improper restriction of caller-controlled file paths that bypasses pathsec enforcement, which allows an attacker to read or write files outside the intended sandbox directories through vulnerable model-artifact APIs...
SUSE CVE-2026-63310
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2026-81722
nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem. The isconsonant helper walks backward over the entire run of trailing 'y' characters on every call, and measure invokes it for each stem position, causin...
SUSE CVE-2026-81723
NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView.readxmlfragment that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to cause severe CPU consumption and denial of service through affected...
SUSE CVE-2026-81724
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested feature-structure input. Attackers can craft trivial payloads with nested brackets that exceed...
SUSE CVE-2026-81725
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...
SUSE CVE-2026-81726
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagge...
SUSE CVE-2026-81727
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...
CVE-2026-81724
creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:53+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-cw6x-m8jw-qmrh...
CVE-2026-12876
creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:51+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-ff5c-cp5c-9wjf...