1 matches found
GHSA-P3M8-78J2-G5P3 NLTK: Default ENFORCE=False Disables All pathsec Security Controls
NLTK's pathsec.py security module defaults to ENFORCE=False line 24, which means all 8 security validation functions only emit RuntimeWarning instead of raising exceptions when violations are detected. The pathsec module was introduced as the fix for CVE-2024-39705 arbitrary code execution via...
8.7CVSS6.1AI score0.00512EPSS
SaveExploits1References8
20