nltk

Security 33

• NLTK: Allowlisted pickle loaders still permit code execution in current source

  3.10.3security advisory

• NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution

  3.10.3security advisory

• NLTK: Corpus Reader Sandbox Bypass

  3.10.3security advisory

• NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement

  3.10.3security advisory

• NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure

  3.10.3security advisory

• NLTK: Downloader.download follows hardlinks and overwrites outside-root files

  3.10.3security advisory

• NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses

  3.10.3security advisory

• NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)

  3.10.3security advisory

• NLTK: pathsec SSRF protection can be bypassed when a proxy is configured

  3.10.3security advisory

• NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks

  3.10.3security advisory

• NLTK: Quadratic CPU Exhaustion in XMLCorpusView._read_xml_fragment()

  3.10.3security advisory

• NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'

  3.10.3security advisory

• NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions

  3.10.3security advisory

• NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input

  3.10.3security advisory

• NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars

  3.10.3security advisory

• NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

  3.10.3security advisory

• NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

  3.10.2security advisory

• NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)

  3.10.2security advisory

• Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode

  3.10.0security advisory

• Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)

  3.10.0security advisory

• Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)

  3.10.0security advisory

• Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex

  3.10.0security advisory

• Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

  3.10.0security advisory

• nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences

  3.10.0security advisory

• NLTK: Default ENFORCE=False Disables All pathsec Security Controls

  3.10.0security advisory

• NLTK downloader allows cross-package resource and model poisoning

  3.10.0security advisory

• NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

  3.10.0security advisory

• NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts

  3.10.0security advisory

• NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

  3.10.0security advisory

• NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure

  3.10.0security advisory

• NLTK: Stable FrameNet and NKJP readers parse outside-root XML

  3.10.0security advisory

• NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read

  3.10.0security advisory

• NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

  3.10.0security advisory