The vulnerability of the _unzip_iter() function in the Natural Language Processing and symbolic processing library package NLTK allows a hacker to execute arbitrary code.

The vulnerability of the unzipiter function in the Natural Language Processing and statistical processing library package NLTK is related to improper code generation. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

NLTK 安全漏洞

NLTK is an open-source natural language toolkit developed by NLTK. It is used to support research and development in natural language processing. NLTK has a security vulnerability that stems from the unzipiter function using zipfile.extractall without performing path validation or security checks...