Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: nltk 3.10.0 Clear all filters
TI-2026-46953 CVE-2026-65915 · GHSA-72r2-7mfr-5xr9

NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer

Priority MEDIUM 64

NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making the security check permanently inert.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0041 Published 2026-08-22 Partial fix · 3.10.0 CWE-284
TI-2026-45157 CVE-2026-63312 · GHSA-x5ph-mj9p-rfr8

NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read

Priority HIGH 77

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead of pathsec.open().

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00651 Published 2026-08-22 Partial fix · 3.10.0 CWE-22
TI-2026-45156 CVE-2026-63311 · GHSA-3gqm-fcw5-w839

NLTK before 3.10.0 SSRF via DNS Resolution Failure

Priority LOW 36

NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00334 Published 2026-08-22 Partial fix · 3.10.0 CWE-918
TI-2026-44528 CVE-2026-62388 · GHSA-p3m8-78j2-g5p3

NLTK before 3.10.0 Insecure Default Configuration in pathsec.py

Priority HIGH 77

NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00512 Published 2026-08-22 Partial fix · 3.10.0 CWE-1188
TI-2026-44525 CVE-2026-62385 · GHSA-568f-pv23-39p4

NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers

Priority HIGH 69

NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned i…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0042 Published 2026-08-22 Fixed in 3.10.0 CWE-73