Nnltk

Products

Exploited and recent CVEs

• CVE-2026-109956 High 7.0 NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path 0.3%
• CVE-2026-81727 High 7.1 NLTK before 3.10.3 Hardlink File Overwrite via downloader 0.2%
• CVE-2026-81726 High 7.0 NLTK through 3.10.3 Path Traversal via Model-Artifact APIs 0.3%
• CVE-2026-81725 Low 3.7 NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader 0.4%
• CVE-2026-81724 Medium 5.3 NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion 0.5%
• CVE-2026-81723 Low 3.7 NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView 0.3%
• CVE-2026-81722 High 7.5 nltk PorterStemmer before 3.10.3 Quadratic-time DoS 0.5%
• CVE-2026-80206 Medium 5.9 NLTK 3.10.2 Regular Expression Denial of Service via tgrep 0.4%
• CVE-2026-80205 High 7.5 NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex 0.7%
• CVE-2026-79676 Medium 5.9 NLTK before 3.10.3 Path Traversal via Symlink Bypass 0.4%
• CVE-2026-79675 Critical 9.8 NLTK before 3.10.3 JVM Argument Injection via Per-Call Options 0.8%
• CVE-2026-79674 High 8.2 NLTK 3.10.2 Path Traversal via corpus-reader constructors 0.4%
• CVE-2026-79657 Critical 9.8 NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization 1.3%
• CVE-2026-78683 Critical 9.6 NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization 0.5%
• CVE-2026-78682 High 7.5 NLTK before 3.10.3 SSRF Protection Bypass via Proxy 0.4%
• CVE-2026-78681 High 7.5 NLTK before 3.10.3 Entity Expansion DoS via ElementTree 0.5%
• CVE-2026-78680 High 7.8 NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary 0.2%
• CVE-2026-70626 Medium 6.2 NLTK before 3.9.4 Symlink Escape via CorpusReader 0.2%
• CVE-2026-66393 High 7.5 NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder 0.5%
• CVE-2026-65915 Medium 6.5 NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer 0.4%
• CVE-2026-63312 High 7.5 NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read 0.7%
• CVE-2026-63311 Medium 5.3 NLTK before 3.10.0 SSRF via DNS Resolution Failure 0.3%
• CVE-2026-62388 High 7.5 NLTK before 3.10.0 Insecure Default Configuration in pathsec.py 0.5%
• CVE-2026-62385 Medium 5.9 NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers 0.4%
• CVE-2026-62384 High 7.5 NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 0.7%
• CVE-2026-62383 Medium 5.5 nltk IPIPANCorpusReader Symlink Arbitrary File Read 0.2%
• CVE-2026-71514 Low 2.5 NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass 0.2%
• CVE-2026-71513 High 8.8 NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass 1.1%
• CVE-2026-72818 High 7.5 NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input 0.7%
• CVE-2026-12372 Low 3.7 Server-Side Request Forgery (SSRF) in nltk/nltk 0.3%