TI-2026-50116 CVE-2026-71514 · GHSA-cv22-g7mw-8v73
NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass
Priority LOW 10
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader.
Vulnerabilities
2 records
TI-2026-50115 CVE-2026-71513 · GHSA-5gh2-94qg-qppq
NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass
Priority MEDIUM 42
NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traver…