186281 matches found
DEBIAN-CVE-2026-63310
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...
DEBIAN-CVE-2026-66393
NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decodeobj that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionErro...
DEBIAN-CVE-2026-63312
NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open directly instead of pathsec.open. Attackers who control the fileid argument can read arbitrary local files regardless of the ENFORCE setting,...
DEBIAN-CVE-2026-65915
NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, making the security check permanently inert. Attackers can pass file:// URLs to nltk.data.load to read arbitrary files accessible to the...
DEBIAN-CVE-2026-62384
NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validatio...
DEBIAN-CVE-2026-62385
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit framebyname, doc, lu, and header methods wi...
DEBIAN-CVE-2026-62388
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers can bypass path traversal and pickle deserialization protections by exploiting the disabled security controls that are only activ...
DEBIAN-CVE-2026-62383
nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers can place a symlink in the corpus root directory and read arbitrary files accessible to the process by calling channels,...
CVE-2026-76606
creationtimestamp| type| source ---|---|--- 2026-08-22 15:02:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/amxzpg76lgeoj 2026-08-22 16:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtongfmfbz25 2026-08-22 16:07:56+00:00| seen|...
CVE-2026-77027
creationtimestamp| type| source ---|---|--- 2026-08-22 15:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gildr4fvpvzbm...
GHSA-3P69-M8GG-FWMF
creationtimestamp| type| source ---|---|--- 2026-08-22 14:51:29+00:00| seen| https://gist.github.com/sl4x0/f22a1e5c94ebe3c82b21e85010eb6e32...
CVE-2026-76571
creationtimestamp| type| source ---|---|--- 2026-08-22 14:48:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5qqwbyjjfirhz 2026-08-22 15:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtomcmkrhf23 2026-08-22 16:07:23+00:00| seen|...
DEBIAN-CVE-2026-77682
Bulletin has no description...
CVE-2026-76597
creationtimestamp| type| source ---|---|--- 2026-08-22 14:42:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jwssk5ui2a7kz...
MINI-MMCC-RX8P-XJGR
Bulletin has no description...
MINI-56C3-MW5H-GC8W
Bulletin has no description...
MINI-PM9G-FCGF-QW4W
Bulletin has no description...
MINI-47W4-QQF2-VQ67
Bulletin has no description...