nltk (PyPI)
Advisories
134
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 3.10.4 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "nltk>=3.10.4"poetry
poetry add "nltk>=3.10.4"uv
uv add "nltk>=3.10.4"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-j456-xh4h-cpf2 NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment |
High EPSS 0.32% |
< 3.10.4 | 3.10.4 |
| GHSA-ff5c-cp5c-9wjf NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars |
Medium | < 3.10.3 | 3.10.3 |
| GHSA-ff5c-cp5c-9wjf NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars |
Medium | < 3.10.3 | 3.10.3 |
| GHSA-vf76-f5cp-9846 Duplicate Advisory: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions Withdrawn |
Medium | <= 3.10.2 | No fix yet |
| GHSA-pf76-q698-37v8 Duplicate Advisory: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input Withdrawn |
Medium | <= 3.10.2 | No fix yet |
| GHSA-hqj7-phwp-c3fp Duplicate Advisory: Model-artifact APIs bypass pathsec and touch files outside allowed roots Withdrawn |
High | <= 3.10.3 | No fix yet |
| GHSA-3m7f-6hxv-6796 Duplicate Advisory: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks Withdrawn |
Low | <= 3.10.2 | No fix yet |
| GHSA-4xw3-jf9x-x7mf Duplicate Advisory: Downloader.download follows hardlinks and overwrites outside-root files Withdrawn |
High | <= 3.10.2 | No fix yet |
| GHSA-hqv3-xm29-p9hq Duplicate Advisory: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` Withdrawn |
Low | <= 3.10.2 | No fix yet |
| GHSA-8x48-8g7j-rqxp Duplicate Advisory: Quadratic-time DoS in PorterStemmer via long runs of 'y' Withdrawn |
High | <= 3.10.2 | No fix yet |
| GHSA-f794-5jv7-7672 NLTK: Downloader.download follows hardlinks and overwrites outside-root files |
High EPSS 0.19% |
< 3.10.3 | 3.10.3 |
| GHSA-f794-5jv7-7672 NLTK: Downloader.download follows hardlinks and overwrites outside-root files |
High EPSS 0.19% |
< 3.10.3 | 3.10.3 |
| GHSA-8mgp-746c-j5xp NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots |
High EPSS 0.34% |
< 3.10.3 | 3.10.3 |
| GHSA-8mgp-746c-j5xp NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots |
High EPSS 0.34% |
<= 3.10.3 | No fix yet |
| GHSA-8mpw-7fpc-4gqj NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks |
Low EPSS 0.37% |
< 3.10.3 | 3.10.3 |
| GHSA-8mpw-7fpc-4gqj NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks |
Low EPSS 0.37% |
< 3.10.3 | 3.10.3 |
| GHSA-cw6x-m8jw-qmrh NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input |
Medium EPSS 0.46% |
< 3.10.3 | 3.10.3 |
| GHSA-cw6x-m8jw-qmrh NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input |
Medium EPSS 0.46% |
< 3.10.3 | 3.10.3 |
| GHSA-vp2x-qp44-57v7 NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` |
Low EPSS 0.28% |
< 3.10.3 | 3.10.3 |
| GHSA-vp2x-qp44-57v7 NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()` |
Low EPSS 0.28% |
< 3.10.3 | 3.10.3 |
| GHSA-ww6m-cw3f-q94g NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y' |
High EPSS 0.52% |
< 3.10.3 | 3.10.3 |
| GHSA-ww6m-cw3f-q94g NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y' |
High EPSS 0.52% |
< 3.10.3 | 3.10.3 |
| GHSA-2rrw-hpqm-36pv Duplicate Advisory: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions Withdrawn |
High | <= 3.9.4 | No fix yet |
| GHSA-w3v8-gmh9-3wv7 NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions |
Medium EPSS 0.44% |
< 3.10.3 | 3.10.3 |
| GHSA-w3v8-gmh9-3wv7 NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions |
Medium EPSS 0.44% |
< 3.10.3 | 3.10.3 |
| GHSA-rrv8-h7p8-rx55 NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions |
High EPSS 0.65% |
< 3.10.0 | 3.10.0 |
| GHSA-rrv8-h7p8-rx55 NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions |
High EPSS 0.65% |
< 3.10.0 | 3.10.0 |
| GHSA-w5q8-6jpp-4246 Duplicate Advisory: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement Withdrawn |
Medium | <= 3.10.2 | No fix yet |
| GHSA-3h2g-j4wp-7qqq Duplicate Advisory: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) Withdrawn |
Critical | <= 3.10.2 | No fix yet |
| GHSA-rcw8-9qrw-27m2 Duplicate Advisory: NLTK: Corpus Reader Sandbox Bypass Withdrawn |
High | <= 3.10.2 | No fix yet |
| GHSA-p4rw-rvv2-7xwr NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement |
Medium EPSS 0.45% |
< 3.10.3 | 3.10.3 |
| GHSA-p4rw-rvv2-7xwr NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement |
Medium EPSS 0.45% |
< 3.10.3 | 3.10.3 |
| GHSA-m4rf-3fr8-xwx3 NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) |
Critical EPSS 0.78% |
< 3.10.3 | 3.10.3 |
| GHSA-m4rf-3fr8-xwx3 NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) |
Critical EPSS 0.78% |
< 3.10.3 | 3.10.3 |
| GHSA-3gq4-3j92-5w49 NLTK: Corpus Reader Sandbox Bypass |
High EPSS 0.39% |
< 3.10.3 | 3.10.3 |
| GHSA-3gq4-3j92-5w49 NLTK: Corpus Reader Sandbox Bypass |
High EPSS 0.39% |
< 3.10.3 | 3.10.3 |
| GHSA-vp9c-2pjm-8925 Duplicate Advisory: Allowlisted pickle loaders still permit code execution in current source Withdrawn |
Critical | <= 3.10.2 | No fix yet |
| GHSA-x99w-6fgc-pmfw NLTK: Allowlisted pickle loaders still permit code execution in current source |
Critical EPSS 1.27% |
< 3.10.3 | 3.10.3 |
| GHSA-x99w-6fgc-pmfw NLTK: Allowlisted pickle loaders still permit code execution in current source |
Critical EPSS 1.27% |
< 3.10.3 | 3.10.3 |
| GHSA-gx65-c5hj-vpv5 Duplicate Advisory: [CWE-502] Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution Withdrawn |
Critical | <= 3.9.4 | No fix yet |
| GHSA-crp9-r7rq-c8cg Duplicate Advisory: pathsec SSRF protection can be bypassed when a proxy is configured Withdrawn |
High | <= 3.10.2 | No fix yet |
| GHSA-54xp-3ww7-6wjg Duplicate Advisory: Uncontrolled search path when invoking the Graphviz 'dot' binary (CWE-426/CWE-427) Withdrawn |
High | <= 3.10.2 | No fix yet |
| GHSA-jx89-3qg8-p2mr Duplicate Advisory: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses (CWE-776) Withdrawn |
High | <= 3.10.2 | No fix yet |
| GHSA-rhp5-r9x4-f5g2 NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution |
Critical EPSS 0.51% |
< 3.10.0 | 3.10.0 |
| GHSA-rhp5-r9x4-f5g2 NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution |
Critical EPSS 0.51% |
< 3.10.0 | 3.10.0 |
| GHSA-6ww7-3frv-cqxh NLTK: pathsec SSRF protection can be bypassed when a proxy is configured |
High EPSS 0.43% |
< 3.10.3 | 3.10.3 |
| GHSA-6ww7-3frv-cqxh NLTK: pathsec SSRF protection can be bypassed when a proxy is configured |
High EPSS 0.43% |
< 3.10.3 | 3.10.3 |
| GHSA-97qj-x29f-37w7 NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses |
High EPSS 0.52% |
< 3.10.3 | 3.10.3 |
| GHSA-97qj-x29f-37w7 NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses |
High EPSS 0.52% |
< 3.10.3 | 3.10.3 |
| GHSA-6hwm-xvph-95vm NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary |
High EPSS 0.18% |
< 3.10.3 | 3.10.3 |
| GHSA-6hwm-xvph-95vm NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary |
High EPSS 0.18% |
< 3.10.3 | 3.10.3 |
| GHSA-8h9m-22mv-qv5r Duplicate Advisory: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root Withdrawn |
Medium | <= 3.9.3 | No fix yet |
| GHSA-qp76-pq9f-gr9m Duplicate Advisory: Stable FrameNet and NKJP readers parse outside-root XML in 3.9.4 Withdrawn |
Medium | <= 3.9.4 | No fix yet |
| GHSA-343m-9fqq-97c7 Duplicate Advisory: NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely Withdrawn |
Medium | >= 3.10.0 | No fix yet |
| GHSA-79ph-w9m5-4v5m Duplicate Advisory: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol Withdrawn |
Medium | <= 3.9.3 | No fix yet |
| GHSA-8vh5-mgjj-w6hg Duplicate Advisory: [CWE-1188] Default ENFORCE=False Disables All pathsec Security Controls Withdrawn |
High | <= 3.9.4 | No fix yet |
| GHSA-8w48-h75v-cxpv Duplicate Advisory: Security Report: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read Withdrawn |
High | <= 3.9.4 | No fix yet |
| GHSA-cv2g-m8rr-888c Duplicate Advisory: Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS Withdrawn |
High | <= 3.9.3 | No fix yet |
| GHSA-qg9p-xrhj-435m Duplicate Advisory: nltk: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure Withdrawn |
Medium | <= 3.9.4 | No fix yet |
| GHSA-qq3h-cgj8-w3fx Duplicate Advisory: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292) Withdrawn |
High | >= 3.10.0 | No fix yet |
| GHSA-r6gq-whwq-mvg9 NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root |
Medium EPSS 0.20% |
< 3.9.4 | 3.9.4 |
| GHSA-r6gq-whwq-mvg9 NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root |
Medium EPSS 0.20% |
< 3.9.4 | 3.9.4 |
| GHSA-72r2-7mfr-5xr9 NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol |
Medium EPSS 0.41% |
< 3.10.0 | 3.10.0 |
| GHSA-72r2-7mfr-5xr9 NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol |
Medium EPSS 0.41% |
< 3.10.0 | 3.10.0 |
| GHSA-x5ph-mj9p-rfr8 NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read |
High EPSS 0.65% |
< 3.10.0 | 3.10.0 |
| GHSA-x5ph-mj9p-rfr8 NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read |
High EPSS 0.65% |
< 3.10.0 | 3.10.0 |
| GHSA-3gqm-fcw5-w839 NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure |
Medium EPSS 0.33% |
< 3.10.0 | 3.10.0 |
| GHSA-3gqm-fcw5-w839 NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure |
Medium EPSS 0.33% |
< 3.10.0 | 3.10.0 |
| GHSA-p3m8-78j2-g5p3 NLTK: Default ENFORCE=False Disables All pathsec Security Controls |
High EPSS 0.51% |
< 3.10.0 | 3.10.0 |
| GHSA-p3m8-78j2-g5p3 NLTK: Default ENFORCE=False Disables All pathsec Security Controls |
High EPSS 0.51% |
< 3.10.0 | 3.10.0 |
| GHSA-568f-pv23-39p4 NLTK: Stable FrameNet and NKJP readers parse outside-root XML |
High EPSS 0.42% |
< 3.10.0 | 3.10.0 |
| GHSA-568f-pv23-39p4 NLTK: Stable FrameNet and NKJP readers parse outside-root XML |
High EPSS 0.42% |
< 3.10.0 | 3.10.0 |
| GHSA-f833-7jw8-xwrv NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292) |
High EPSS 0.65% |
>= 3.10.0, < 3.10.2 | 3.10.2 |
| GHSA-f833-7jw8-xwrv NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292) |
High EPSS 0.65% |
>= 3.10.0, < 3.10.2 | 3.10.2 |
| GHSA-3hhw-38pf-pxj6 NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely |
Medium EPSS 0.18% |
>= 3.10.0, < 3.10.2 | 3.10.2 |
| GHSA-3hhw-38pf-pxj6 NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely |
Medium EPSS 0.18% |
>= 3.10.0, < 3.10.2 | 3.10.2 |
| GHSA-cv22-g7mw-8v73 NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure |
Low EPSS 0.17% |
>= 3.9.4, < 3.10.3 | 3.10.3 |
| GHSA-cv22-g7mw-8v73 NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure |
Low EPSS 0.17% |
>= 3.9.4, < 3.10.3 | 3.10.3 |
| GHSA-5gh2-94qg-qppq NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution |
High EPSS 1.10% |
>= 3.10.0, < 3.10.3 | 3.10.3 |
| GHSA-5gh2-94qg-qppq NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution |
High EPSS 1.10% |
>= 3.10.0, < 3.10.3 | 3.10.3 |
| GHSA-qx2g-xrx7-vfh8 NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking |
High EPSS 0.74% |
< 3.10.1 | 3.10.1 |
| GHSA-qx2g-xrx7-vfh8 NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking |
High EPSS 0.74% |
< 3.10.1 | 3.10.1 |
| GHSA-2jhm-w3mp-jcwr NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts |
Low EPSS 0.26% |
< 3.10.0 | 3.10.0 |
| GHSA-2jhm-w3mp-jcwr NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts |
Low EPSS 0.26% |
<= 3.9.4 | No fix yet |
| GHSA-ffj6-66c4-86gw NLTK downloader allows cross-package resource and model poisoning |
Medium EPSS 0.21% |
< 3.10.0 | 3.10.0 |
| GHSA-ffj6-66c4-86gw NLTK downloader allows cross-package resource and model poisoning |
Medium EPSS 0.21% |
< 3.10.0 | 3.10.0 |
| GHSA-pv39-qrfq-g8gc Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection Withdrawn |
Medium | <= 3.9.2 | No fix yet |
| GHSA-5wp5-5229-5g6q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection |
Medium EPSS 0.10% |
<= 3.9.2 | No fix yet |
| GHSA-5wp5-5229-5g6q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection |
Medium EPSS 0.10% |
< 3.9.3 | 3.9.3 |
| GHSA-5wp5-5229-5g6q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection |
Medium EPSS 0.10% |
<= 3.9.4 | No fix yet |
| GHSA-5wp5-5229-5g6q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection |
Medium EPSS 0.10% |
< 3.9.3 | 3.9.3 |
| GHSA-qvv7-cg9c-w4x3 Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode |
High | < 3.10.0 | 3.10.0 |
| GHSA-qvv7-cg9c-w4x3 Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode |
High | < 3.10.0 | 3.10.0 |
| GHSA-fg7f-2386-8897 Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex |
High | < 3.10.0 | 3.10.0 |
| GHSA-fg7f-2386-8897 Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex |
High | < 3.10.0 | 3.10.0 |
| GHSA-6hm5-jgcp-p838 Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) |
High | < 3.10.0 | 3.10.0 |
| GHSA-6hm5-jgcp-p838 Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) |
High | < 3.10.0 | 3.10.0 |
| GHSA-xh95-f55m-82fw Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) |
High | < 3.10.0 | 3.10.0 |
| GHSA-xh95-f55m-82fw Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) |
High | < 3.10.0 | 3.10.0 |
| GHSA-848c-c2cx-j7qx NLTK vulnerable to Eval Injection via collocations CLI arguments |
High EPSS 0.27% |
< 3.9.3 | 3.9.3 |
| GHSA-848c-c2cx-j7qx NLTK vulnerable to Eval Injection via collocations CLI arguments |
High EPSS 0.27% |
< 3.9.3 | 3.9.3 |
| GHSA-9r6g-266r-89x4 NLTK Stanford wrapper classes execute untrusted JAR files without verification |
High EPSS 0.19% |
< 3.9.4 | 3.9.4 |
| GHSA-9r6g-266r-89x4 NLTK Stanford wrapper classes execute untrusted JAR files without verification |
High EPSS 0.19% |
< 3.9.4 | 3.9.4 |
| GHSA-q5h6-fcf5-49g9 Duplicate Advisory: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences Withdrawn |
High | all versions | No fix yet |
| GHSA-m42h-3232-vpv3 nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences |
High | < 3.10.0 | 3.10.0 |
| GHSA-m42h-3232-vpv3 nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences |
High | <= 3.9.4 | No fix yet |
| GHSA-p4gq-832x-fm9v Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read |
High EPSS 0.63% |
< 3.10.0 | 3.10.0 |
| GHSA-p4gq-832x-fm9v Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read |
High EPSS 0.63% |
< 3.10.0 | 3.10.0 |
| GHSA-469j-vmhf-r6v7 NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite |
High EPSS 0.60% |
< 3.9.4 | 3.9.4 |
| GHSA-469j-vmhf-r6v7 NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite |
High EPSS 0.60% |
<= 3.9.2 | No fix yet |
| GHSA-jm6w-m3j8-898g Unauthenticated remote shutdown in nltk.app.wordnet_app |
High EPSS 1.24% |
< 3.9.4 | 3.9.4 |
| GHSA-jm6w-m3j8-898g Unauthenticated remote shutdown in nltk.app.wordnet_app |
High EPSS 1.24% |
< 3.9.4 | 3.9.4 |
| GHSA-gfwx-w7gr-fvh7 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk |
Medium EPSS 0.34% |
< 3.9.4 | 3.9.4 |
| GHSA-gfwx-w7gr-fvh7 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk |
Medium EPSS 0.34% |
< 3.9.4 | 3.9.4 |
| GHSA-rf74-v2fm-23pw Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS |
High EPSS 0.52% |
< 3.9.4 | 3.9.4 |
| GHSA-rf74-v2fm-23pw Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS |
High EPSS 0.52% |
< 3.9.4 | 3.9.4 |
| GHSA-h8wq-7xc4-p3qx NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring() |
High EPSS 0.55% |
< 3.9.3 | 3.9.3 |
| GHSA-h8wq-7xc4-p3qx NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring() |
High EPSS 0.55% |
<= 3.9.2 | No fix yet |
| PYSEC-2026-99 NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. |
Critical EPSS 0.84% |
< 3.9.3 | 3.9.3 |
| GHSA-68j8-pq59-fqgm NLTK has a Path Traversal issue |
High EPSS 1.00% |
<= 3.9.2 | No fix yet |
| GHSA-68j8-pq59-fqgm NLTK has a Path Traversal issue |
High EPSS 1.00% |
< 3.9.3 | 3.9.3 |
| GHSA-7p94-766c-hgjp NLTK has a Zip Slip Vulnerability |
High EPSS 1.04% |
< 3.9.3 | 3.9.3 |
| GHSA-7p94-766c-hgjp NLTK has a Zip Slip Vulnerability |
High EPSS 1.04% |
< 3.9.3 | 3.9.3 |
| GHSA-cgvx-9447-vcch ntlk unsafe deserialization vulnerability |
Critical EPSS 1.35% |
< 3.9 | 3.9 |
| GHSA-cgvx-9447-vcch ntlk unsafe deserialization vulnerability |
Critical EPSS 1.35% |
< 3.9 | 3.9 |
| GHSA-rqjh-jp2r-59cj NLTK Vulnerable to REDoS |
High EPSS 1.57% |
< 3.6.6 | 3.6.6 |
| GHSA-rqjh-jp2r-59cj NLTK Vulnerable to REDoS |
High EPSS 1.57% |
< 3.6.6 | 3.6.6 |
| GHSA-f8m6-h2c7-8h9x Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize) |
High EPSS 2.79% |
< 3.6.6 | 3.6.6 |
| GHSA-f8m6-h2c7-8h9x Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize) |
High EPSS 2.79% |
< 3.6.5 | 3.6.5 |
| GHSA-2ww3-fxvq-293j NLTK Vulnerable to REDoS |
High EPSS 1.59% |
< 3.6.4 | 3.6.4 |
| GHSA-2ww3-fxvq-293j NLTK Vulnerable to REDoS |
High EPSS 1.59% |
< 3.6.4 | 3.6.4 |
| PYSEC-2019-36 NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package… Withdrawn |
Not rated yet | < 3.4.5 | 3.4.5 |
| GHSA-mr7p-25v2-35wr NLTK Vulnerable To Path Traversal |
High EPSS 5.67% |
< 3.4.5 | 3.4.5 |
| GHSA-mr7p-25v2-35wr NLTK Vulnerable To Path Traversal |
High EPSS 5.67% |
< 3.4.5 | 3.4.5 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor