PT-2026-81158

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.0 Description An unsafe pickle deserialization issue exists in the TransitionParser.parse function. The function utilizes pickle load with the restricted parameter set to False, which directs deserialization through...

PT-2026-81156

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Multiple modules use the xml.etree.ElementTree library to parse XML, which honors entity declarations in document DTDs Document Type Definitions. This allows attackers to craft XML payloads with nested...

PT-2026-81356

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Insufficient validation of JVM options passed through the options parameter in the java function allows the injection of dangerous JVM flags. By supplying malicious options such as -agentpath,...

Linux Distros Unpatched Vulnerability : CVE-2026-78682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load,...

Linux Distros Unpatched Vulnerability : CVE-2026-78680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg,...

Linux Distros Unpatched Vulnerability : CVE-2026-78681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft X...

PT-2026-81357

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Corpus readers reopen root-derived paths using the built-in open function instead of nltk.pathsec.open, which allows symbolic links to escape trusted roots. This path traversal issue enables attackers...

PT-2026-81155

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Failure to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent. repr svg allows for arbitrary code execution. Attackers can exploit bare-name...

Linux Distros Unpatched Vulnerability : CVE-2026-78683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.0 affected versions =3.9.4 contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse method...

CVE-2026-78681

NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft XML payloads with nested entity declarations that expand from hundreds of bytes to megabytes in memory, causing denial of service...

OPENSUSE-SU-2026:11587-1 python313-nltk-3.10.3-1.1 on GA media

These are all security issues fixed in the python313-nltk-3.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

Deserialization of Untrusted Data

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via unsafe deserialization in AllowlistUnpickler. An attacker can execute arbitrary commands by supplying a...

Directory Traversal

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Directory Traversal via multiple corpus readers crubadan.py, lin.py, xmldocs.py, pl196x.py, mte.py, toolbox.py, namedentity.py, nkjp.py,...

Directory Traversal

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Directory Traversal via the gettag method in nltk/corpus/reader/ipipan.py, which is the single choke point for channels, domains, categories, a...

External Control of File Name or Path

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to External Control of File Name or Path via path handling in FramenetCorpusReader and NKJPCorpusReader. An attacker can read and parse arbitrary...

Insecure Default Initialization of Resource

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via disabled security enforcement in pathsec.py. An attacker can bypass protections against path...

Resources Downloaded over Insecure Protocol

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Resources Downloaded over Insecure Protocol via the downloader. An attacker can execute arbitrary code and compromise system integrity by...

Server-side Request Forgery (SSRF)

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the validatenetworkurl DNS resolution path in nltk/pathsec.py. An attacker can make urlopen reach restrict...

GHSA-5GH2-94QG-QPPQ NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

GHSA-CV22-G7MW-8V73 NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...