nltk
PyPI52 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting nltkpage 2 of 2
- CVE-2026-81726HIGHCVSS 7.0EG 7.0fixed in 3.10.32026-08-27
vulnerable: 0.8 ... 3.9b1 (68 versions)
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots thr…
- CVE-2026-81727HIGHCVSS 7.1EG 7.1fixed in 3.10.32026-08-27
vulnerable: 0.8 ... 3.9b1 (68 versions)
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to overwrite files outside the install root through pre-existing hardli…
Check whether nltk is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for nltk CVEs against the assets you own.
Book a Demo →