CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product nltk:nltk. Show all products

42 CVEs, showing 1 to 42
CVESeverityTitlePublished
CVE-2026-109956High 7.0NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path
Assigned by VulnCheck
Oct 13, 2026
CVE-2026-81727High 7.1NLTK before 3.10.3 Hardlink File Overwrite via downloader
Assigned by VulnCheck
Aug 27, 2026
CVE-2026-81726High 7.0NLTK through 3.10.3 Path Traversal via Model-Artifact APIs
Assigned by VulnCheck
Aug 27, 2026
CVE-2026-81725Low 3.7NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader
Assigned by VulnCheck
Aug 27, 2026
CVE-2026-81724Medium 5.3NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion
Assigned by VulnCheck
Aug 27, 2026
CVE-2026-81723Low 3.7NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView
Assigned by VulnCheck
Aug 27, 2026
CVE-2026-81722High 7.5nltk PorterStemmer before 3.10.3 Quadratic-time DoS
Assigned by VulnCheck
Aug 27, 2026
CVE-2026-80206Medium 5.9NLTK 3.10.2 Regular Expression Denial of Service via tgrep
Assigned by VulnCheck
Aug 26, 2026
CVE-2026-80205High 7.5NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
Assigned by VulnCheck
Aug 26, 2026
CVE-2026-79676Medium 5.9NLTK before 3.10.3 Path Traversal via Symlink Bypass
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-79675Critical 9.8NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-79674High 8.2NLTK 3.10.2 Path Traversal via corpus-reader constructors
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-79657Critical 9.8NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-78683Critical 9.6NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-78682High 7.5NLTK before 3.10.3 SSRF Protection Bypass via Proxy
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-78681High 7.5NLTK before 3.10.3 Entity Expansion DoS via ElementTree
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-78680High 7.8NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary
Assigned by VulnCheck
Aug 25, 2026
CVE-2026-70626Medium 6.2NLTK before 3.9.4 Symlink Escape via CorpusReader
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-66393High 7.5NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-65915Medium 6.5NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-63312High 7.5NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-63311Medium 5.3NLTK before 3.10.0 SSRF via DNS Resolution Failure
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-62388High 7.5NLTK before 3.10.0 Insecure Default Configuration in pathsec.py
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-62385Medium 5.9NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-62384High 7.5NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-62383Medium 5.5nltk IPIPANCorpusReader Symlink Arbitrary File Read
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-71514Low 2.5NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-71513High 8.8NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass
Assigned by VulnCheck
Aug 22, 2026
CVE-2026-72818High 7.5NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input
Assigned by VulnCheck
Aug 20, 2026
CVE-2026-12372Low 3.7Server-Side Request Forgery (SSRF) in nltk/nltk
Assigned by @huntr_ai
Aug 9, 2026
CVE-2026-12261Medium 5.3Improper Access Control in nltk/nltk
Assigned by @huntr_ai
Aug 7, 2026
CVE-2026-12259Medium 6.5In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation.Aug 3, 2026
CVE-2025-71408High 7.8NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
Assigned by VulnCheck
Jul 24, 2026
CVE-2026-12252High 7.8In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulne…Jul 4, 2026
CVE-2026-54293High 7.5NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Jun 22, 2026
CVE-2026-33236High 8.1NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Mar 20, 2026
CVE-2026-33231High 7.5NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Mar 20, 2026
CVE-2026-33230Medium 6.1NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Mar 20, 2026
CVE-2026-0846High 7.5A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths.Mar 9, 2026
CVE-2026-0848Critical 10.0NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module.Mar 5, 2026
CVE-2026-0847High 7.5A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and Brac…Mar 4, 2026
CVE-2025-14009High 8.8A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions.Feb 18, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.