662 matches found
CVE-2021-43854
NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...
python311-nltk-3.9.1-2.4 on GA media (moderate)
python311-nltk-3.9.1-2.4 on GA media Announcement ID: openSUSE-SU-2025:15099-1 Rating: moderate Cross-References: CVE-2021-3828 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
USN-7365-1: NLTK vulnerabilities
It was discovered that NLTK contained a regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a denial of service. CVE-2021-3842, CVE-2021-43854...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : NLTK vulnerabilities (USN-7365-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7365-1 advisory. It was discovered that NLTK contained a regex that is susceptible to catastrophic backtracking. An attacker could...
Ubuntu: Security Advisory (USN-7365-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2021-43854
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language...
openSUSE Security Advisory (openSUSE-SU-2024:0221-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for python-nltk (important)
openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2024:0221-1 Rating: important References: 1227174 Cross-References: CVE-2024-39705 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This...
openSUSE 15 Security Update : python-nltk (openSUSE-SU-2024:0222-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2024:0222-1 advisory. - CVE-2024-39705: Fixed remote code execution through unsafe pickle usage boo1227174. Tenable has extracted the preceding description block directly from...
OPENSUSE-SU-2024:0222-1 Security update for python-nltk
This update for python-nltk fixes the following issues: - CVE-2024-39705: Fixed remote code execution through unsafe pickle usage boo1227174...
OPENSUSE-SU-2024:0221-1 Security update for python-nltk
This update for python-nltk fixes the following issues: - CVE-2024-39705: Fixed remote code execution through unsafe pickle usage boo1227174...
Security update for python-nltk (important)
openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2024:0222-1 Rating: important References: 1227174 Cross-References: CVE-2024-39705 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: This...
OPENSUSE-SU-2024:14103-1 python310-nltk-3.8.1-2.1 on GA media
These are all security issues fixed in the python310-nltk-3.8.1-2.1 package on the GA media of openSUSE Tumbleweed...
Remote Code Execution
nltk is vulnerable to Remote Code Execution. The vulnerability is due to models containing pickled Python code, which could allow an attacker to execute arbitrary code. An attacker would need to preform a man-in-the-middle attack to modify the packaged pickles such as the averagedperceptrontagger...
GHSA-CGVX-9447-VCCH vulnerabilities
Vulnerabilities for packages: py3-nltk...
ntlk unsafe deserialization vulnerability
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
GHSA-CGVX-9447-VCCH vulnerabilities
Vulnerabilities for packages: py3-nltk, nemo, apache-beam-python-3.11-sdk...
GHSA-CGVX-9447-VCCH ntlk unsafe deserialization vulnerability
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...