Skip to content
OpenAdvisories

Product · nltk

nltk/nltk

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-0848 Public exploit

    Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

    NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the …

    nltk nltk/nltk nltk nltk Debian Ubuntu PyPI
  • High 8.6
    CVE-2026-0847 Public exploit

    Path Traversal in nltk/nltk

    A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classes fail to properly sanitiz…

    nltk nltk/nltk nltk nltk Debian Ubuntu PyPI