Skip to content
nltk nltk
-
CVE-2026-109956
High 7.0
NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path
0.3%
-
CVE-2026-81727
High 7.1
NLTK before 3.10.3 Hardlink File Overwrite via downloader
0.2%
-
CVE-2026-81726
High 7.0
NLTK through 3.10.3 Path Traversal via Model-Artifact APIs
0.3%
-
CVE-2026-81725
Low 3.7
NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader
0.4%
-
CVE-2026-81724
Medium 5.3
NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion
0.5%
-
CVE-2026-81723
Low 3.7
NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView
0.3%
-
CVE-2026-81722
High 7.5
nltk PorterStemmer before 3.10.3 Quadratic-time DoS
0.5%
-
CVE-2026-80206
Medium 5.9
NLTK 3.10.2 Regular Expression Denial of Service via tgrep
0.4%
-
CVE-2026-80205
High 7.5
NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
0.7%
-
CVE-2026-79676
Medium 5.9
NLTK before 3.10.3 Path Traversal via Symlink Bypass
0.4%
-
CVE-2026-79675
Critical 9.8
NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
0.8%
-
CVE-2026-79674
High 8.2
NLTK 3.10.2 Path Traversal via corpus-reader constructors
0.4%
-
CVE-2026-79657
Critical 9.8
NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization
1.3%
-
CVE-2026-78683
Critical 9.6
NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization
0.5%
-
CVE-2026-78682
High 7.5
NLTK before 3.10.3 SSRF Protection Bypass via Proxy
0.4%
-
CVE-2026-78681
High 7.5
NLTK before 3.10.3 Entity Expansion DoS via ElementTree
0.5%
-
CVE-2026-78680
High 7.8
NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary
0.2%
-
CVE-2026-70626
Medium 6.2
NLTK before 3.9.4 Symlink Escape via CorpusReader
0.2%
-
CVE-2026-66393
High 7.5
NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder
0.5%
-
CVE-2026-65915
Medium 6.5
NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer
0.4%
-
CVE-2026-63312
High 7.5
NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read
0.7%
-
CVE-2026-63311
Medium 5.3
NLTK before 3.10.0 SSRF via DNS Resolution Failure
0.3%
-
CVE-2026-62388
High 7.5
NLTK before 3.10.0 Insecure Default Configuration in pathsec.py
0.5%
-
CVE-2026-62385
Medium 5.9
NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers
0.4%
-
CVE-2026-62384
High 7.5
NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2
0.7%
-
CVE-2026-62383
Medium 5.5
nltk IPIPANCorpusReader Symlink Arbitrary File Read
0.2%
-
CVE-2026-71514
Low 2.5
NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass
0.2%
-
CVE-2026-71513
High 8.8
NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass
1.1%
-
CVE-2026-72818
High 7.5
NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input
0.7%
-
CVE-2026-54293
High 7.5
NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
0.6%
-
CVE-2026-33236
High 8.1
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
0.6%
-
CVE-2026-33231
High 7.5
NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app
1.3%
-
CVE-2026-33230
Medium 6.1
nltk Vulnerable to Cross-site Scripting
0.3%
-
CVE-2021-43854
High 7.5
Inefficient Regular Expression Complexity in nltk
2.8%