python313-nltk-3.10.2-1.1 on GA media (moderate)

python313-nltk-3.10.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11510-1 Rating: moderate Cross-References: CVE-2026-12372 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-12372

A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...