Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/09/08 4:40 p.m.•10 views

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

Summary IPIPANCorpusReader nltk/corpus/reader/ipipan.py exposes public methods, channels, domains, categories, and fileidschannels=..., that accept a caller supplied fileids list and read a file via a completely unprotected builtin open call, with no nltk.pathsec involvement at all. A symlink...

6.8CVSS6.2AI score0.00183EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder