Security Advisories for nltk in pypi
Moderate
about 1 month ago
NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks
pypi
nltk
High
about 1 month ago
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions
pypi
nltk
High
about 1 month ago
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
pypi
nltk
High
about 1 month ago
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement
pypi
nltk
Critical
about 1 month ago
NLTK: Allowlisted pickle loaders still permit code execution in current source
pypi
nltk
High
about 1 month ago
NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
pypi
nltk
High
about 1 month ago
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured
pypi
nltk
Critical
about 1 month ago
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
pypi
nltk
Moderate
about 1 month ago
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely
pypi
nltk
High
about 1 month ago
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)
pypi
nltk
Moderate
about 1 month ago
NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
pypi
nltk
High
about 1 month ago
NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read
pypi
nltk
Moderate
about 1 month ago
NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol
pypi
nltk
High
about 1 month ago
NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root
pypi
nltk
High
about 2 months ago
NLTK: Default ENFORCE=False Disables All pathsec Security Controls
pypi
nltk
Moderate
about 2 months ago
NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure
pypi
nltk
Moderate
about 2 months ago
NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'
pypi
nltk
Moderate
about 2 months ago
NLTK: Downloader.download follows hardlinks and overwrites outside-root files
pypi
nltk
High
about 2 months ago
NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots
pypi
nltk
Moderate
about 2 months ago
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`
pypi
nltk
Moderate
about 2 months ago
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars
pypi
nltk
Moderate
about 2 months ago
NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input
pypi
nltk
Critical
about 2 months ago
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
pypi
nltk
High
about 2 months ago
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
pypi
nltk
Low
2 months ago
NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure
pypi
nltk
High
2 months ago
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution
pypi
nltk
High
2 months ago
NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking
pypi
nltk
High
2 months ago
nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences
pypi
nltk
Low
2 months ago
NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts
pypi
nltk
High
3 months ago
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
pypi
nltk
High
4 months ago
NLTK Stanford wrapper classes execute untrusted JAR files without verification
pypi
nltk
High
4 months ago
Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
pypi
nltk
High
7 months ago
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
pypi
nltk
Moderate
7 months ago
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
pypi
nltk
Moderate
7 months ago
Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS
pypi
nltk
High
8 months ago
NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()
pypi
nltk
High
almost 5 years ago
Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
pypi
nltk