Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/09/02 3:40 p.m.•27 views

NLTK: Default ENFORCE=False Disables All pathsec Security Controls

NLTK's pathsec.py security module defaults to ENFORCE=False line 24, which means all 8 security validation functions only emit RuntimeWarning instead of raising exceptions when violations are detected. The pathsec module was introduced as the fix for CVE-2024-39705 arbitrary code execution via...

9.8CVSS7.5AI score0.01346EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder