| NLTK: Quadratic-time CPU denial of service in CCG lexicon parser (fromstring) on wide bracket bodies and operator chainsCVE-2026-126299 · GHSA-89P3-FCCH-88PH |
nltk |
PyPI |
High
|
Fix reported |
|
| NLTK: Quadratic-time CPU denial of service in Tree.chomsky_normal_form right-factor binarization via list.pop(0)CVE-2026-126298 · GHSA-R53H-RW34-8H97 |
nltk |
PyPI |
High
|
Fix reported |
|
| NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescanCVE-2026-126297 · GHSA-V8F3-6PHW-6MH9 |
nltk |
PyPI |
High
|
Fix reported |
|
| NLTK: BllipParser passes caller-supplied model paths to the bllipparser C extension with no pathsec check, enabling arbitrary readCVE-2026-126295 · GHSA-FG9W-WFP5-J933 |
nltk |
PyPI |
Medium
|
Fix reported |
|
| NLTK: Quadratic CPU exhaustion in LegalitySyllableTokenizer.tokenize via unguarded onset reversal loopGHSA-GPWC-27CW-RH9R |
nltk |
PyPI |
Medium
|
Fix reported |
|
| NLTK: Quadratic CPU exhaustion in TreebankWordTokenizer.span_tokenize via list.pop(0) in quote-restore loopCVE-2026-126300 · GHSA-FFR9-MGRR-WCVR |
nltk |
PyPI |
Medium
|
Fix reported |
|
| NLTK: Unbounded CPU consumption in SteppingRecursiveDescentParser.parse() with ambiguous or self-embedding grammarsCVE-2026-126303 · GHSA-8FX7-8JR8-84RV |
nltk |
PyPI |
High
|
Fix reported |
|
| NLTK: Symlink escape in YCOECorpusReader lets a psd/pos directory symlink read files outside the corpus root within the data sandboxCVE-2026-126304 · GHSA-QG35-44QX-7VRR |
nltk |
PyPI |
High
|
Fix reported |
|
| NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwriteCVE-2026-33236 · GHSA-469J-VMHF-R6V7Version ranges need review. |
nltkLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK has a Path Traversal issueCVE-2026-0847 · GHSA-68J8-PQ59-FQGMVersion ranges need review. |
nltkLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed rootsCVE-2026-81726 · GHSA-8MGP-746C-J5XPVersion ranges need review. |
nltkExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containmentGHSA-J456-XH4H-CPF2 |
nltk |
PyPI |
High
|
Fix reported |
|
| NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution FailureCVE-2026-63311 · GHSA-3GQM-FCW5-W839Version ranges need review. |
nltkExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionCVE-2026-12259 · GHSA-5WP5-5229-5G6Q |
nltkExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| NLTK: Default ENFORCE=False Disables All pathsec Security ControlsCVE-2026-62388 · GHSA-P3M8-78J2-G5P3Version ranges need review. |
nltkLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK downloader allows cross-package resource and model poisoningCVE-2026-12261 · GHSA-FFJ6-66C4-86GWVersion ranges need review. |
nltkExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| NLTK Stanford wrapper classes execute untrusted JAR files without verificationCVE-2026-12252 · GHSA-9R6G-266R-89X4Version ranges need review. |
nltkOpenShift Lightspeed/openshift-lightspeed/lightspeed-service-api-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hostsCVE-2026-12372 · GHSA-2JHM-W3MP-JCWRVersion ranges need review. |
nltkExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Low
|
Fix reported |
|
| NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammarsCVE-2026-12876 · GHSA-FF5C-CP5C-9WJFVersion ranges need review. |
nltk |
PyPI |
Medium
|
Fix reported |
|
| NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtrackingCVE-2026-72818 · GHSA-QX2G-XRX7-VFH8Version ranges need review. |
nltkLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
