| CVE-2026-12372 |
A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch
|
3.7
Low
|
Aug 9, 2026 |
| CVE-2026-12261 |
A vulnerability in `nltk.downloader` in nltk/nltk…
|
5.3
Medium
|
Aug 7, 2026 |
| CVE-2026-12259 |
In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes…
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2026-12252 |
In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger,…
|
7.8
High
|
Jul 4, 2026 |
| CVE-2026-12243 |
NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504
|
7.5
High
|
Jun 30, 2026 |
| CVE-2026-12199 |
A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows unauthenticated remote shutdown of the local…
|
7.5
High
|
Jun 17, 2026 |
| CVE-2026-0846 |
A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file…
|
8.6
High
|
Mar 9, 2026 |
| CVE-2026-0847 |
A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple…
|
8.6
High
|
Mar 4, 2026 |
| CVE-2025-14009 |
A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions
|
10.0
Critical
|
Feb 18, 2026 |
| CVE-2021-3842 |
nltk is vulnerable to Inefficient Regular Expression Complexity
|
7.5
High
|
Jan 4, 2022 |
| CVE-2021-3828 |
nltk is vulnerable to Inefficient Regular Expression Complexity
|
7.5
High
|
Sep 27, 2021 |