Skip to content
OpenAdvisories

Package · Debian

nltk

53 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-79657 Public exploit

    NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization

    NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace funct…

    nltk nltk nltk nltk Debian Ubuntu PyPI
  • Critical 10.0
    CVE-2026-0848 Public exploit

    Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

    NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the …

    nltk nltk/nltk nltk nltk Debian Ubuntu PyPI