nltk records

43 published records for vendor nltk.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 7
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

43 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-0848Proof of concept	Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loadingnltk · nltk · CWE-20 pre-auth RCE	Critical10.0	—	0.7%	Mar 5, 2026
39Monitor	CVE-2024-39705No exploit	NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download funCWE-502 pre-auth RCE Deserialization	Critical9.8	—	1.3%	Jun 27, 2024
37Monitor	CVE-2026-79657No exploit	NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserializationnltk · nltk · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	1.2%	Aug 25, 2026
37Monitor	CVE-2026-79675No exploit	NLTK before 3.10.3 JVM Argument Injection via Per-Call Optionsnltk · nltk · CWE-88 pre-auth RCE	Critical9.3	—	0.7%	Aug 25, 2026
37Monitor	CVE-2026-78683No exploit	NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserializationnltk · nltk · CWE-502 pre-auth RCE Deserialization	Critical9.4	—	0.5%	Aug 25, 2026
35Monitor	CVE-2025-14009No exploit	Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Executionnltk · nltk · CWE-94 RCE	High8.8	—	1.0%	Feb 18, 2026
35Monitor	CVE-2026-79674No exploit	NLTK 3.10.2 Path Traversal via corpus-reader constructorsnltk · nltk · CWE-73 Pre-auth Path traversal	High8.8	—	0.3%	Aug 25, 2026
34Monitor	CVE-2026-71513No exploit	NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypassnltk · nltk · CWE-502 pre-auth RCE Deserialization	High8.7	—	1.0%	Aug 22, 2026
34Monitor	CVE-2026-62384No exploit	NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2nltk · nltk · CWE-22 Pre-auth Path traversal	High8.7	—	0.6%	Aug 22, 2026
34Monitor	CVE-2026-80205No exploit	NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regexnltk · nltk · CWE-1333 Pre-auth Denial of service	High8.7	—	0.6%	Aug 26, 2026
34Monitor	CVE-2026-63312No exploit	NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Readnltk · nltk · CWE-22 Pre-auth Path traversal	High8.7	—	0.6%	Aug 22, 2026
34Monitor	CVE-2026-66393No exploit	NLTK before 3.9.4 Denial of Service via JSONTaggedDecodernltk · nltk · CWE-674 Pre-auth Denial of service	High8.7	—	0.5%	Aug 22, 2026
34Monitor	CVE-2026-78681No exploit	NLTK before 3.10.3 Entity Expansion DoS via ElementTreenltk · nltk · CWE-776 Pre-auth	High8.7	—	0.5%	Aug 25, 2026
34Monitor	CVE-2026-81722No exploit	nltk PorterStemmer before 3.10.3 Quadratic-time DoSnltk · nltk · CWE-407 Pre-auth	High8.7	—	0.5%	Aug 27, 2026
34Monitor	CVE-2026-62388No exploit	NLTK before 3.10.0 Insecure Default Configuration in pathsec.pynltk · nltk · CWE-1188 Pre-auth Deserialization Path traversal	High8.7	—	0.5%	Aug 22, 2026
34Monitor	CVE-2026-78682No exploit	NLTK before 3.10.3 SSRF Protection Bypass via Proxynltk · nltk · CWE-918 Pre-auth SSRF	High8.7	—	0.4%	Aug 25, 2026
34Monitor	CVE-2025-71408No exploit	NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Argumentsnltk · nltk · CWE-95 RCE	High8.5	—	0.2%	Jul 24, 2026
34Monitor	CVE-2026-70626No exploit	NLTK before 3.9.4 Symlink Escape via CorpusReadernltk · nltk · CWE-59	High8.6	—	0.2%	Aug 22, 2026
33Monitor	CVE-2026-81726No exploit	NLTK through 3.10.3 Path Traversal via Model-Artifact APIsnltk · nltk · CWE-73 Pre-auth Path traversal	High8.3	—	0.3%	Aug 27, 2026
32Monitor	CVE-2019-14751Proof of concept	NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) inltk · nltk · CWE-22 Pre-auth Path traversal	High7.5	—	5.6%	Aug 22, 2019
32Monitor	CVE-2026-33236No exploit	NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwritenltk · nltk · CWE-22 Pre-auth Path traversal	High8.1	—	0.6%	Mar 20, 2026
32Monitor	CVE-2026-79676No exploit	NLTK before 3.10.3 Path Traversal via Symlink Bypassnltk · nltk · CWE-22 Pre-auth Path traversal	High8.2	—	0.4%	Aug 25, 2026
32Monitor	CVE-2026-80206No exploit	NLTK 3.10.2 Regular Expression Denial of Service via tgrepnltk · nltk · CWE-1333 Pre-auth Denial of service	High8.2	—	0.4%	Aug 26, 2026
32Monitor	CVE-2026-62385No exploit	NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readersnltk · nltk · CWE-73 Pre-auth Path traversal	High8.2	—	0.4%	Aug 22, 2026
31Monitor	CVE-2021-43854No exploit	Inefficient Regular Expression Complexity in nltknltk · nltk · CWE-400 Pre-auth Denial of service	High7.5	—	2.7%	Dec 23, 2021

CVE-2026-0848
40Plan
Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading
CriticalCVSS 10.0Proof of conceptEPSS 0%
- pre-auth RCE
nltk · nltkMar 5, 2026
CVE-2024-39705
39Monitor
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download fun
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Deserialization
Jun 27, 2024
CVE-2026-79657
37Monitor
NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Deserialization
nltk · nltkAug 25, 2026
CVE-2026-79675
37Monitor
NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
nltk · nltkAug 25, 2026
CVE-2026-78683
37Monitor
NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
- Deserialization
nltk · nltkAug 25, 2026
CVE-2025-14009
35Monitor
Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution
HighCVSS 8.8No exploitEPSS 1%
- RCE
nltk · nltkFeb 18, 2026
CVE-2026-79674
35Monitor
NLTK 3.10.2 Path Traversal via corpus-reader constructors
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 25, 2026
CVE-2026-71513
34Monitor
NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass
HighCVSS 8.7No exploitEPSS 1%
- pre-auth RCE
- Deserialization
nltk · nltkAug 22, 2026
CVE-2026-62384
34Monitor
NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 22, 2026
CVE-2026-80205
34Monitor
NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
nltk · nltkAug 26, 2026
CVE-2026-63312
34Monitor
NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 22, 2026
CVE-2026-66393
34Monitor
NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
nltk · nltkAug 22, 2026
CVE-2026-78681
34Monitor
NLTK before 3.10.3 Entity Expansion DoS via ElementTree
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
nltk · nltkAug 25, 2026
CVE-2026-81722
34Monitor
nltk PorterStemmer before 3.10.3 Quadratic-time DoS
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
nltk · nltkAug 27, 2026
CVE-2026-62388
34Monitor
NLTK before 3.10.0 Insecure Default Configuration in pathsec.py
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Deserialization
- Path traversal
nltk · nltkAug 22, 2026
CVE-2026-78682
34Monitor
NLTK before 3.10.3 SSRF Protection Bypass via Proxy
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
nltk · nltkAug 25, 2026
CVE-2025-71408
34Monitor
NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
HighCVSS 8.5No exploitEPSS 0%
- RCE
nltk · nltkJul 24, 2026
CVE-2026-70626
34Monitor
NLTK before 3.9.4 Symlink Escape via CorpusReader
HighCVSS 8.6No exploitEPSS 0%
nltk · nltkAug 22, 2026
CVE-2026-81726
33Monitor
NLTK through 3.10.3 Path Traversal via Model-Artifact APIs
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 27, 2026
CVE-2019-14751
32Monitor
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) i
HighCVSS 7.5Proof of conceptEPSS 5%
- Pre-auth
- Path traversal
nltk · nltkAug 22, 2019
CVE-2026-33236
32Monitor
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkMar 20, 2026
CVE-2026-79676
32Monitor
NLTK before 3.10.3 Path Traversal via Symlink Bypass
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 25, 2026
CVE-2026-80206
32Monitor
NLTK 3.10.2 Regular Expression Denial of Service via tgrep
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
nltk · nltkAug 26, 2026
CVE-2026-62385
32Monitor
NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 22, 2026
CVE-2021-43854
31Monitor
Inefficient Regular Expression Complexity in nltk
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
nltk · nltkDec 23, 2021