PT-2026-146627

NLTK before 3.10.4 contains a path traversal vulnerability in save maxent params and load maxent params that bypasses the pathsec filesystem restriction mechanism. Attackers who control the tab dir argument can read or overwrite model parameter files outside permitted data roots, because the...