nltk vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-78680Highnltk: NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binaryCVE-2026-71514Lownltk: NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosureCVE-2026-71513Highnltk: NLTK AllowlistUnpickler dotted-name validation bypass allows remote code executionCVE-2026-72818Highnltk: NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtrackingCVE-2026-12243Highnltk: nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded SequencesCVE-2026-12372Lownltk: NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hostsCVE-2026-12261Mediumnltk: NLTK downloader allows cross-package resource and model poisoningCVE-2026-12075Highnltk: Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE…CVE-2026-12061Highnltk: Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regexCVE-2026-12072Highnltk: Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox…CVE-2026-12074Highnltk: Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the…CVE-2025-71408Highnltk: NLTK vulnerable to Eval Injection via collocations CLI argumentsCVE-2026-12252Highnltk: NLTK Stanford wrapper classes execute untrusted JAR files without verificationCVE-2026-54293Highnltk: Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File ReadCVE-2026-33236Highnltk: NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwriteCVE-2026-33231Highnltk: Unauthenticated remote shutdown in nltk.app.wordnet_appCVE-2026-33230Mediumnltk: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltkCVE-2026-66393Mediumnltk: Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoSCVE-2026-0846Highnltk: NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()CVE-2026-0847Highnltk: NLTK has a Path Traversal issueCVE-2025-14009Criticalnltk: NLTK has a Zip Slip VulnerabilityCVE-2024-39705Highnltk: ntlk unsafe deserialization vulnerabilityCVE-2021-3842Highnltk: NLTK Vulnerable to REDoSCVE-2021-43854Highnltk: Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)CVE-2021-3828Highnltk: NLTK Vulnerable to REDoS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo