| CVE-2026-12372 |
A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch
|
3.7
Faible
|
9 août 2026 |
| CVE-2026-12261 |
A vulnerability in `nltk.downloader` in nltk/nltk…
|
5.3
Moyenne
|
7 août 2026 |
| CVE-2026-12259 |
In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes…
|
5.3
Moyenne
|
3 août 2026 |
| CVE-2026-12252 |
In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger,…
|
7.8
Élevée
|
4 juil. 2026 |
| CVE-2026-12243 |
NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504
|
7.5
Élevée
|
30 juin 2026 |
| CVE-2026-12199 |
A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows unauthenticated remote shutdown of the local…
|
7.5
Élevée
|
17 juin 2026 |
| CVE-2026-0846 |
A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file…
|
8.6
Élevée
|
9 mars 2026 |
| CVE-2026-0847 |
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple…
|
8.6
Élevée
|
4 mars 2026 |
| CVE-2025-14009 |
A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions
|
10.0
Critique
|
18 févr. 2026 |
| CVE-2021-3842 |
nltk is vulnerable to Inefficient Regular Expression Complexity
|
7.5
Élevée
|
4 janv. 2022 |
| CVE-2021-3828 |
nltk is vulnerable to Inefficient Regular Expression Complexity
|
7.5
Élevée
|
27 sept. 2021 |