Skip to content
OpenAdvisories

Package · Wolfi

py3-nltk

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.0
    CVE-2026-109956

    NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path

    NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the model_filename or model argument can make the weka JVM write…

    nltk nltk nltk nltk Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-54293

    NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

    NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load() in NLTK is vulnerable to path traversal via URL-encode…

    nltk nltk open-webui nltk Debian Ubuntu Wolfi PyPI
  • High 8.1
    CVE-2026-33236

    NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

    NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the `subdir` and `id` att…

    nltk nltk nltk nltk Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-33231

    NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

    NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauthenticated remote shutdown o…

    nltk nltk open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Wolfi PyPI