nltk vulnerabilities (PyPI)
54 vulnerabilities.
-
nltkPyPI NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path 8.3 High -
nltkPyPI NLTK before 3.10.3 Hardlink File Overwrite via downloader 6.9 Medium -
nltkPyPI NLTK through 3.10.3 Path Traversal via Model-Artifact APIs 8.3 High -
nltkPyPI NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader 6.3 Medium -
nltkPyPI NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion 6.9 Medium -
nltkPyPI NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView 6.3 Medium -
nltkPyPI nltk PorterStemmer before 3.10.3 Quadratic-time DoS 8.7 High -
nltkPyPI NLTK 3.10.2 Regular Expression Denial of Service via tgrep 8.2 High -
nltkPyPI NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex 8.7 High -
nltkPyPI NLTK before 3.10.3 Path Traversal via Symlink Bypass 8.2 High -
nltkPyPI NLTK before 3.10.3 JVM Argument Injection via Per-Call Options 9.3 Critical -
nltkPyPI NLTK 3.10.2 Path Traversal via corpus-reader constructors 8.8 High -
nltkPyPI NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization 9.3 Critical -
nltkPyPI NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization 9.4 Critical -
nltkPyPI NLTK before 3.10.3 SSRF Protection Bypass via Proxy 8.7 High -
nltkPyPI NLTK before 3.10.3 Entity Expansion DoS via ElementTree 8.7 High -
nltkPyPI NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary 8.5 High -
nltkPyPI NLTK before 3.9.4 Symlink Escape via CorpusReader 8.6 High -
nltkPyPI NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer 7.1 High -
nltkPyPI NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read 8.7 High -
nltkPyPI NLTK before 3.10.0 SSRF via DNS Resolution Failure 6.9 Medium -
nltkPyPI NLTK before 3.10.0 Insecure Default Configuration in pathsec.py 8.7 High -
nltkPyPI NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers 8.2 High -
nltkPyPI NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 8.7 High -
nltkPyPI nltk IPIPANCorpusReader Symlink Arbitrary File Read 6.8 Medium -
nltkPyPI NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass 2.0 Low -
nltkPyPI NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass 8.7 High -
nltkPyPI NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input 8.7 High -
nltkPyPI NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars 6.9 Medium -
nltkPyPI Server-Side Request Forgery (SSRF) in nltk/nltk 3.7 Low -
nltkPyPI Improper Access Control in nltk/nltk 5.3 Medium -
nltkPyPI Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection 9.3 Critical -
nltkPyPI Improper Input Validation in nltk/nltk 5.3 Medium -
nltkPyPI Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode 8.6 High -
nltkPyPI Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex 7.5 High -
nltkPyPI Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) 7.5 High -
nltkPyPI Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) 7.5 High -
nltkPyPI NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments 8.5 High -
nltkPyPI Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk 7.8 High -
nltkPyPI nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences 7.5 High -
nltkPyPI NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read 7.5 High -
nltkPyPI NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite 8.1 High -
nltkPyPI NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app 7.5 High -
nltkPyPI nltk Vulnerable to Cross-site Scripting 6.1 Medium -
nltkPyPI NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder 8.7 High -
nltkPyPI Arbitrary File Read via Absolute Path Input in nltk.util.filestring() 8.6 High -
nltkPyPI Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading 10.0 Critical -
nltkPyPI Path Traversal in nltk/nltk 8.6 High -
nltkPyPI Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution 10.0 Critical -
nltkPyPI ntlk unsafe deserialization vulnerability 9.8 Critical - Show olderLoading…