pkg:Debian/nltk

All known vulnerabilities

• CRITICAL10.0CVE-2026-0848NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module.
  from 0
• CRITICAL10.0CVE-2025-14009NLTK has a Zip Slip Vulnerability
  from 0
• HIGH8.6CVE-2026-0846NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()
  from 0
• HIGH8.6NLTK has a Path Traversal issue
  from 0
• HIGH8.1NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
  from 0
• HIGH7.5NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504.
  from 0
• HIGH7.5A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows unauthenticated remote shutdown of the local WordNet Browser HTTP serv…
  from 0
• HIGH7.5Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
  from 0
• HIGH7.5Unauthenticated remote shutdown in nltk.app.wordnet_app
  from 0
• HIGH7.5ntlk unsafe deserialization vulnerability
  from 0
• HIGH7.5NLTK Vulnerable to REDoS
  from 0
• HIGH7.5NLTK Vulnerable to REDoS
  from 0
• HIGH7.5NLTK Vulnerable To Path Traversal
  from 0, < 3.4.5-1
• MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
  from 0