Nltk Nltk vulnerabilities

• nltk NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path CVE-2026-109956 Fix available 8.3 HighOctober 13, 2026
• nltk NLTK before 3.10.3 Hardlink File Overwrite via downloader CVE-2026-81727 Fix available 6.9 MediumAugust 27, 2026
• nltk NLTK through 3.10.3 Path Traversal via Model-Artifact APIs CVE-2026-81726 Fix available 8.3 HighAugust 27, 2026
• nltk NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader CVE-2026-81725 Fix available 6.3 MediumAugust 27, 2026
• nltk NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion CVE-2026-81724 Fix available 6.9 MediumAugust 27, 2026
• nltk NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView CVE-2026-81723 Fix available 6.3 MediumAugust 27, 2026
• nltk nltk PorterStemmer before 3.10.3 Quadratic-time DoS CVE-2026-81722 Fix available 8.7 HighAugust 27, 2026
• nltk NLTK 3.10.2 Regular Expression Denial of Service via tgrep CVE-2026-80206 Fix available 8.2 HighAugust 26, 2026
• nltk NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex CVE-2026-80205 Fix available 8.7 HighAugust 26, 2026
• nltk NLTK before 3.10.3 Path Traversal via Symlink Bypass CVE-2026-79676 Fix available 8.2 HighAugust 25, 2026
• nltk NLTK before 3.10.3 JVM Argument Injection via Per-Call Options CVE-2026-79675 Fix available 9.3 CriticalAugust 25, 2026
• nltk NLTK 3.10.2 Path Traversal via corpus-reader constructors CVE-2026-79674 Fix available 8.8 HighAugust 25, 2026
• nltk NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization CVE-2026-79657 Public exploitFix available 9.3 CriticalAugust 25, 2026
• nltk NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization CVE-2026-78683 Fix available 9.4 CriticalAugust 25, 2026
• nltk NLTK before 3.10.3 SSRF Protection Bypass via Proxy CVE-2026-78682 Fix available 8.7 HighAugust 25, 2026
• nltk NLTK before 3.10.3 Entity Expansion DoS via ElementTree CVE-2026-78681 Fix available 8.7 HighAugust 25, 2026
• nltk NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary CVE-2026-78680 Fix available 8.5 HighAugust 25, 2026
• nltk NLTK before 3.9.4 Symlink Escape via CorpusReader CVE-2026-70626 Fix available 8.6 HighAugust 22, 2026
• nltk NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer CVE-2026-65915 Fix available 7.1 HighAugust 22, 2026
• nltk NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read CVE-2026-63312 Fix available 8.7 HighAugust 22, 2026
• nltk NLTK before 3.10.0 SSRF via DNS Resolution Failure CVE-2026-63311 Fix available 6.9 MediumAugust 22, 2026
• nltk NLTK before 3.10.0 Insecure Default Configuration in pathsec.py CVE-2026-62388 Fix available 8.7 HighAugust 22, 2026
• nltk NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers CVE-2026-62385 Fix available 8.2 HighAugust 22, 2026
• nltk NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 CVE-2026-62384 Fix available 8.7 HighAugust 22, 2026
• nltk nltk IPIPANCorpusReader Symlink Arbitrary File Read CVE-2026-62383 Fix available 6.8 MediumAugust 22, 2026
• nltk NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass CVE-2026-71514 Fix available 2.0 LowAugust 22, 2026
• nltk NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass CVE-2026-71513 Fix available 8.7 HighAugust 22, 2026
• nltk NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input CVE-2026-72818 Fix available 8.7 HighAugust 20, 2026
• nltk, nltk nltk/nltk +1 more Server-Side Request Forgery (SSRF) in nltk/nltk CVE-2026-12372 Fix available 3.7 LowAugust 9, 2026
• nltk, nltk nltk/nltk +1 more Improper Access Control in nltk/nltk CVE-2026-12261 Fix available 5.3 MediumAugust 7, 2026
• nltk, nltk nltk/nltk +1 more Improper Input Validation in nltk/nltk CVE-2026-12259 Fix available 5.3 MediumAugust 3, 2026
• nltk, ntlk +1 more NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments CVE-2025-71408 Fix available 8.5 HighJuly 24, 2026
• nltk, nltk nltk/nltk +1 more Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk CVE-2026-12252 Fix available 7.8 HighJuly 4, 2026
• nltk nltk/nltk Unauthenticated Denial of Service in nltk.app.wordnet_app CVE-2026-12199 7.5 HighJune 17, 2026
• nltk, red hat exploit intelligence, openshift lightspeed +4 more +6 more NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read CVE-2026-54293 Fix available 7.5 HighJune 16, 2026
• nltk, red hat lightspeed core, openshift lightspeed +4 more +6 more NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite CVE-2026-33236 Fix available 8.1 HighMarch 19, 2026
• nltk, red hat lightspeed core, openshift lightspeed +4 more +6 more NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app CVE-2026-33231 Fix available 7.5 HighMarch 19, 2026
• nltk nltk Vulnerable to Cross-site Scripting CVE-2026-33230 Fix available 6.1 MediumMarch 18, 2026
• nltk NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder CVE-2026-66393 Fix available 8.7 HighMarch 18, 2026
• nltk, nltk nltk/nltk, red hat lightspeed core +5 more +7 more Arbitrary File Read via Absolute Path Input in nltk.util.filestring() CVE-2026-0846 Fix available 8.6 HighMarch 9, 2026
• nltk, nltk nltk/nltk +1 more Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading CVE-2026-0848 Public exploitFix available 10.0 CriticalMarch 5, 2026
• nltk, nltk nltk/nltk, red hat lightspeed core +5 more +7 more Path Traversal in nltk/nltk CVE-2026-0847 Public exploitFix available 8.6 HighMarch 4, 2026
• nltk, nltk nltk/nltk, red hat openshift lightspeed +2 more +4 more Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution CVE-2025-14009 Fix available 10.0 CriticalFebruary 18, 2026
• nltk ntlk unsafe deserialization vulnerability CVE-2024-39705 Fix available 9.8 CriticalJune 27, 2024
• nltk, nltk nltk/nltk, debian linux +1 more +3 more Inefficient Regular Expression Complexity in nltk/nltk CVE-2021-3842 Fix available 7.5 HighJanuary 4, 2022
• nltk Inefficient Regular Expression Complexity in nltk CVE-2021-43854 Fix available 7.5 HighDecember 23, 2021
• nltk, nltk nltk/nltk +1 more Inefficient Regular Expression Complexity in nltk/nltk CVE-2021-3828 Fix available 7.5 HighSeptember 27, 2021
• nltk NLTK Vulnerable To Path Traversal CVE-2019-14751 Public exploitFix available 7.5 HighAugust 20, 2019