CVE-2026-12252

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser are vulnerable to untrusted JAR code execution. These classes accept user-controllable JAR paths and execute...

CVE-2026-Pending-Delegator-Command-Injection

CVE-2026-XXXXX Pending: Command Injection in delegator.py...

EUVD-2025-6835

Malicious code in bioql PyPI...