Known Vulnerabilities for products from Nltk
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Nltk".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-81727 json | Not Provided | 2026-08-27 | 2026-08-27 | |
| CVE-2026-81726 json | NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using r... | Not Provided | 2026-08-27 | 2026-08-31 |
| CVE-2026-81725 json | Not Provided | 2026-08-27 | 2026-08-28 | |
| CVE-2026-81724 json | NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthent... | Not Provided | 2026-08-27 | 2026-08-31 |
| CVE-2026-81723 json | Not Provided | 2026-08-27 | 2026-08-31 | |
| CVE-2026-81722 json | nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service i... | Not Provided | 2026-08-27 | 2026-08-31 |
| CVE-2026-80206 json | Not Provided | 2026-08-26 | 2026-08-26 | |
| CVE-2026-80205 json | NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.... | Not Provided | 2026-08-26 | 2026-09-03 |
| CVE-2026-79676 json | Not Provided | 2026-08-25 | 2026-08-25 | |
| CVE-2026-79675 json | NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowi... | Not Provided | 2026-08-25 | 2026-09-01 |
| CVE-2026-79674 json | NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers t... | Not Provided | 2026-08-25 | 2026-08-31 |
| CVE-2026-79657 json | NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire mod... | Not Provided | 2026-08-25 | 2026-08-31 |
| CVE-2026-78683 json | NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParse... | Not Provided | 2026-08-25 | 2026-08-31 |
| CVE-2026-78682 json | NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, ... | Not Provided | 2026-08-25 | 2026-08-31 |
| CVE-2026-78681 json | NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in d... | Not Provided | 2026-08-25 | 2026-09-01 |
| CVE-2026-71514 json | NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus... | Not Provided | 2026-08-22 | 2026-09-02 |
| CVE-2026-70626 json | NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read ... | Not Provided | 2026-08-22 | 2026-08-31 |
| CVE-2026-66393 json | NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attacke... | Not Provided | 2026-08-22 | 2026-08-27 |
| CVE-2026-65915 json | NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a... | Not Provided | 2026-08-22 | 2026-08-31 |
| CVE-2026-63312 json | NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORC... | Not Provided | 2026-08-22 | 2026-08-31 |
Known software with vulnerabilities from Nltk
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Nltk | Nltk | 2.0.1 |