Skip to content
OpenAdvisories

Package · Wolfi

py3.11-nltk

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-14009

    Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

    A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This allows attackers to cra…

    nltk nltk/nltk open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Alpine Wolfi PyPI
  • Critical 9.8
    CVE-2024-39705

    ntlk unsafe deserialization vulnerability

    NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.

    nltk nltk nltk py3.12-nltk Debian Ubuntu Wolfi PyPI