Skip to content
OpenAdvisories

Package · Debian

nltk

53 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-0847 Public exploit

    Path Traversal in nltk/nltk

    A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitiz…

  • High 7.5
    CVE-2019-14751 Public exploit

    NLTK Vulnerable To Path Traversal

    NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.