CRITICAL10.0CVE-2026-0848NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. from 0, < 3.9.3
from 0, < 3.9.3
from 0, < 3.9.3
HIGH8.6NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()
from 0, < 3.9.3
HIGH8.6NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()
from 0, <= 3.9.2
HIGH8.6NLTK has a Path Traversal issue
from 0, <= 3.9.2
HIGH8.6NLTK has a Path Traversal issue
from 0, < 3.9.3
HIGH7.8In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDep…
from 0, < 3.9.4
HIGH7.5NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504.
from 0, <= 3.9.4
HIGH7.5Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
from 0, < 3.10.0
HIGH7.5ntlk unsafe deserialization vulnerability
from 0, < 3.9
HIGH7.5ntlk unsafe deserialization vulnerability
from 0, < 3.9
HIGH7.5NLTK Vulnerable to REDoS
from 0, < 3.6.6
HIGH7.5NLTK Vulnerable to REDoS
from 0, < 2a50a3edc9d35f57ae42a921c621edc160877f4d | from 0, < 3.6.6
HIGH7.5Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
from 0, < 3.6.6
HIGH7.5NLTK Vulnerable to REDoS
from 0, < 3.6.4
HIGH7.5NLTK Vulnerable to REDoS
from 0, < 277711ab1dec729e626b27aab6fa35ea5efbd7e6 | from 0, < 3.6.4
HIGH7.5NLTK Vulnerable To Path Traversal
from 0, < 3.4.5
HIGH7.5NLTK Vulnerable To Path Traversal
from 0, < f59d7ed8df2e0e957f7f247fe218032abdbe9a10 | from 0, < 3.4.5