1436183 matches found
CVE-2026-62388
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers can bypass path traversal and pickle deserialization protections by exploiting the disabled security controls that are only activ...
CVE-2026-76606
creationtimestamp| type| source ---|---|--- 2026-08-22 15:02:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/amxzpg76lgeoj 2026-08-22 16:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtongfmfbz25 2026-08-22 16:07:56+00:00| seen|...
GHSA-3P69-M8GG-FWMF
creationtimestamp| type| source ---|---|--- 2026-08-22 14:51:29+00:00| seen| https://gist.github.com/sl4x0/f22a1e5c94ebe3c82b21e85010eb6e32...
MINI-PM9G-FCGF-QW4W
Bulletin has no description...
MINI-MJGQ-HQ63-4469
Bulletin has no description...
MINI-G5MQ-C45M-34WV
Bulletin has no description...
MINI-G5WP-P3GF-8464
Bulletin has no description...
MINI-HHX8-5RCP-HRX9
Bulletin has no description...
MINI-W8QR-49MP-4JVH
Bulletin has no description...
DEBIAN-CVE-2026-71514
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...
MINI-F9R2-CRVP-Q7F2
Bulletin has no description...
MINI-42VG-63PM-25P4
Bulletin has no description...
CVE-2026-62388 NLTK before 3.10.0 Insecure Default Configuration in pathsec.py
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers can bypass path traversal and pickle deserialization protections by exploiting the disabled security controls that are only activ...
EUVD-2026-64336
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers can bypass path traversal and pickle deserialization protections by exploiting the disabled security controls that are only activ...
CVE-2026-62388
NLTK (Python Natural Language Processing toolkit) versions before 3.10.0 ship with an insecure default in pathsec.py : the ENFORCE flag is set to False, causing all security validation functions to emit warnings rather than raising exceptions. This means path traversal and pickle deserialization ...
MINI-P9M3-WR24-P7W6
Bulletin has no description...
MINI-4JVX-6GR5-PF56
Bulletin has no description...
MINI-Q78V-4GQ5-7JJ7
Bulletin has no description...