nltk vulnerabilities (Debian)
54 vulnerabilities.
-
nltkDebian NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path 8.3 High -
nltkDebian NLTK before 3.10.3 Hardlink File Overwrite via downloader 6.9 Medium -
nltkDebian NLTK through 3.10.3 Path Traversal via Model-Artifact APIs 8.3 High -
nltkDebian NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader 6.3 Medium -
nltkDebian NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion 6.9 Medium -
nltkDebian NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView 6.3 Medium -
nltkDebian nltk PorterStemmer before 3.10.3 Quadratic-time DoS 8.7 High -
nltkDebian NLTK 3.10.2 Regular Expression Denial of Service via tgrep 8.2 High -
nltkDebian NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex 8.7 High -
nltkDebian NLTK before 3.10.3 Path Traversal via Symlink Bypass 8.2 High -
nltkDebian NLTK before 3.10.3 JVM Argument Injection via Per-Call Options 9.3 Critical -
nltkDebian NLTK 3.10.2 Path Traversal via corpus-reader constructors 8.8 High -
nltkDebian NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization 9.3 Critical -
nltkDebian NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization 9.4 Critical -
nltkDebian NLTK before 3.10.3 SSRF Protection Bypass via Proxy 8.7 High -
nltkDebian NLTK before 3.10.3 Entity Expansion DoS via ElementTree 8.7 High -
nltkDebian NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary 8.5 High -
nltkDebian NLTK before 3.9.4 Symlink Escape via CorpusReader 8.6 High -
nltkDebian NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer 7.1 High -
nltkDebian NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read 8.7 High -
nltkDebian NLTK before 3.10.0 SSRF via DNS Resolution Failure 6.9 Medium -
nltkDebian NLTK before 3.10.0 Insecure Default Configuration in pathsec.py 8.7 High -
nltkDebian NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers 8.2 High -
nltkDebian NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 8.7 High -
nltkDebian nltk IPIPANCorpusReader Symlink Arbitrary File Read 6.8 Medium -
nltkDebian NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass 2.0 Low -
nltkDebian NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass 8.7 High -
nltkDebian NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input 8.7 High -
nltkDebian NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars 6.9 Medium -
nltkDebian [Unknown description] No score -
nltkDebian Server-Side Request Forgery (SSRF) in nltk/nltk 3.7 Low -
nltkDebian Improper Access Control in nltk/nltk 5.3 Medium -
nltkDebian Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection 9.3 Critical -
nltkDebian Improper Input Validation in nltk/nltk 5.3 Medium -
nltkDebian Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex 7.5 High -
nltkDebian Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) 7.5 High -
nltkDebian Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) 7.5 High -
nltkDebian NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments 8.5 High -
nltkDebian Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk 7.8 High -
nltkDebian Unauthenticated Denial of Service in nltk.app.wordnet_app 7.5 High -
nltkDebian NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read 7.5 High -
nltkDebian NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite 8.1 High -
nltkDebian NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app 7.5 High -
nltkDebian nltk Vulnerable to Cross-site Scripting 6.1 Medium -
nltkDebian NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder 8.7 High -
nltkDebian Arbitrary File Read via Absolute Path Input in nltk.util.filestring() 8.6 High -
nltkDebian Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading 10.0 Critical -
nltkDebian Path Traversal in nltk/nltk 8.6 High -
nltkDebian Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution 10.0 Critical -
nltkDebian ntlk unsafe deserialization vulnerability 9.8 Critical - Show olderLoading…