Advisoriesby Ibis
NLTK security advisories
56 advisories · 34 critical or high in 12 months · latest Oct 27
56 advisories
NLTK: path traversalCVE-2026-109956fixed in 3.10.4NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocksCVE-2026-81725fixed in 3.10.3NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressionsCVE-2026-80206fixed in 3.10.3NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressionsCVE-2026-80205fixed in 3.10.0NLTK: Corpus Reader Sandbox BypassCVE-2026-79674fixed in 3.10.3NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcementCVE-2026-79676fixed in 3.10.3NLTK: Allowlisted pickle loaders still permit code execution in current sourceCVE-2026-79657fixed in 3.10.3NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parsesCVE-2026-78681fixed in 3.10.3NLTK: pathsec SSRF protection can be bypassed when a proxy is configuredCVE-2026-78682fixed in 3.10.3NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code ExecutionCVE-2026-78683fixed in 3.10.0NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirelyCVE-2026-62383fixed in 3.10.2NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)CVE-2026-62384fixed in 3.10.2NLTK: Stable FrameNet and NKJP readers parse outside-root XMLCVE-2026-62385fixed in 3.10.0NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionCVE-2026-12259fixed in 3.9.3NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File ReadCVE-2026-63312fixed in 3.10.0NLTK: FileSystemPathPointer.open() sandbox check is dead code , arbitrary file read via file:// protocolCVE-2026-65915fixed in 3.10.0NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus rootCVE-2026-70626fixed in 3.9.4NLTK: Default ENFORCE=False Disables All pathsec Security ControlsCVE-2026-62388fixed in 3.10.0NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution FailureCVE-2026-63311fixed in 3.10.0NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'CVE-2026-81722fixed in 3.10.3NLTK: Downloader.download follows hardlinks and overwrites outside-root filesCVE-2026-81727fixed in 3.10.3NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed rootsCVE-2026-81726fixed in 3.10.4NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`CVE-2026-81723fixed in 3.10.3NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammarsCVE-2026-12876fixed in 3.10.3NLTK: uncontrolled recursionCVE-2026-81724fixed in 3.10.3NLTK: argument injectionCVE-2026-79675fixed in 3.10.3NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binaryCVE-2026-78680fixed in 3.10.3NLTK AllowlistUnpickler dotted-name validation bypass allows remote code executionCVE-2026-71513fixed in 3.10.3NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosureCVE-2026-71514fixed in 3.10.3NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtrackingCVE-2026-72818fixed in 3.10.1nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded SequencesCVE-2026-12243fixed in 3.10.0NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hostsCVE-2026-12372fixed in 3.10.0NLTK: server-side request forgeryCVE-2026-12372no fix yetNLTK downloader allows cross-package resource and model poisoningCVE-2026-12261fixed in 3.10.0A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4CVE-2026-12261fixed in 3.10.0NLTK: server-side request forgeryCVE-2026-12075fixed in 3.10.0Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regexCVE-2026-12061fixed in 3.10.0NLTK: arbitrary file readCVE-2026-12072fixed in 3.10.0NLTK: path traversalCVE-2026-12074fixed in 3.10.0NLTK vulnerable to Eval Injection via collocations CLI argumentsCVE-2025-71408fixed in 3.9.3NLTK Stanford wrapper classes execute untrusted JAR files without verificationCVE-2026-12252fixed in 3.9.4NLTK: code executionCVE-2026-12252fixed in 3.9.4NLTK: path traversalCVE-2026-54293fixed in 3.10.0NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwriteCVE-2026-33236fixed in 3.9.4Unauthenticated remote shutdown in nltk.app.wordnet_appCVE-2026-33231fixed in 3.9.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltkCVE-2026-33230fixed in 3.9.4Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoSCVE-2026-66393fixed in 3.9.4NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()CVE-2026-0846fixed in 3.9.3NLTK: code executionCVE-2026-0848fixed in 3.9.3NLTK has a Path Traversal issueCVE-2026-0847fixed in 3.9.3NLTK has a Zip Slip VulnerabilityCVE-2025-14009fixed in 3.9.3ntlk unsafe deserialization vulnerabilityCVE-2024-39705fixed in 3.9NLTK Vulnerable to REDoSCVE-2021-3842fixed in 3.6.6Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)CVE-2021-43854fixed in 3.6.6NLTK Vulnerable to REDoSCVE-2021-3828fixed in 3.6.4NLTK Vulnerable To Path TraversalCVE-2019-14751fixed in 3.4.5