nltk kayıtları
nltk üreticisine ait 42 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9
- CWE-502 Deserialization of Untrusted Data4
- CWE-1333 Inefficient Regular Expression Complexity4
- CWE-73 External Control of File Name or Path3
- CWE-918 Server-Side Request Forgery (SSRF)3
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
42 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-0848Kavram kanıtı | Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loadingnltk · nltk · CWE-20 | Kritik10,0 | — | %0,8 | 5 Mar 2026 |
39İzleyin | CVE-2024-39705İstismar yok | NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download funCWE-502 | Kritik9,8 | — | %1,3 | 27 Haz 2024 |
37İzleyin | CVE-2026-79657İstismar yok | NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserializationnltk · nltk · CWE-502 | Kritik9,3 | — | %1,3 | 25 Ağu 2026 |
37İzleyin | CVE-2026-79675İstismar yok | NLTK before 3.10.3 JVM Argument Injection via Per-Call Optionsnltk · nltk · CWE-88 | Kritik9,3 | — | %0,8 | 25 Ağu 2026 |
37İzleyin | CVE-2026-78683İstismar yok | NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserializationnltk · nltk · CWE-502 | Kritik9,4 | — | %0,5 | 25 Ağu 2026 |
35İzleyin | CVE-2025-14009İstismar yok | Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Executionnltk · nltk · CWE-94 | Yüksek8,8 | — | %1,0 | 18 Şub 2026 |
35İzleyin | CVE-2026-79674İstismar yok | NLTK 3.10.2 Path Traversal via corpus-reader constructorsnltk · nltk · CWE-73 | Yüksek8,8 | — | %0,4 | 25 Ağu 2026 |
34İzleyin | CVE-2026-71513İstismar yok | NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypassnltk · nltk · CWE-502 | Yüksek8,7 | — | %1,1 | 22 Ağu 2026 |
34İzleyin | CVE-2026-63312İstismar yok | NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Readnltk · nltk · CWE-22 | Yüksek8,7 | — | %0,7 | 22 Ağu 2026 |
34İzleyin | CVE-2026-80205İstismar yok | NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regexnltk · nltk · CWE-1333 | Yüksek8,7 | — | %0,7 | 26 Ağu 2026 |
34İzleyin | CVE-2026-62384İstismar yok | NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2nltk · nltk · CWE-22 | Yüksek8,7 | — | %0,7 | 22 Ağu 2026 |
34İzleyin | CVE-2026-78681İstismar yok | NLTK before 3.10.3 Entity Expansion DoS via ElementTreenltk · nltk · CWE-776 | Yüksek8,7 | — | %0,5 | 25 Ağu 2026 |
34İzleyin | CVE-2026-81722İstismar yok | nltk PorterStemmer before 3.10.3 Quadratic-time DoSnltk · nltk · CWE-407 | Yüksek8,7 | — | %0,5 | 27 Ağu 2026 |
34İzleyin | CVE-2026-66393İstismar yok | NLTK before 3.9.4 Denial of Service via JSONTaggedDecodernltk · nltk · CWE-674 | Yüksek8,7 | — | %0,5 | 22 Ağu 2026 |
34İzleyin | CVE-2026-62388İstismar yok | NLTK before 3.10.0 Insecure Default Configuration in pathsec.pynltk · nltk · CWE-1188 | Yüksek8,7 | — | %0,5 | 22 Ağu 2026 |
34İzleyin | CVE-2026-78682İstismar yok | NLTK before 3.10.3 SSRF Protection Bypass via Proxynltk · nltk · CWE-918 | Yüksek8,7 | — | %0,4 | 25 Ağu 2026 |
34İzleyin | CVE-2025-71408İstismar yok | NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Argumentsnltk · nltk · CWE-95 | Yüksek8,5 | — | %0,3 | 24 Tem 2026 |
34İzleyin | CVE-2026-70626İstismar yok | NLTK before 3.9.4 Symlink Escape via CorpusReadernltk · nltk · CWE-59 | Yüksek8,6 | — | %0,2 | 22 Ağu 2026 |
33İzleyin | CVE-2026-81726İstismar yok | NLTK through 3.10.3 Path Traversal via Model-Artifact APIsnltk · nltk · CWE-73 | Yüksek8,3 | — | %0,3 | 27 Ağu 2026 |
32İzleyin | CVE-2019-14751Kavram kanıtı | NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) inltk · nltk · CWE-22 | Yüksek7,5 | — | %5,7 | 22 Ağu 2019 |
32İzleyin | CVE-2026-33236İstismar yok | NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwritenltk · nltk · CWE-22 | Yüksek8,1 | — | %0,7 | 20 Mar 2026 |
32İzleyin | CVE-2026-79676İstismar yok | NLTK before 3.10.3 Path Traversal via Symlink Bypassnltk · nltk · CWE-22 | Yüksek8,2 | — | %0,4 | 25 Ağu 2026 |
32İzleyin | CVE-2026-80206İstismar yok | NLTK 3.10.2 Regular Expression Denial of Service via tgrepnltk · nltk · CWE-1333 | Yüksek8,2 | — | %0,4 | 26 Ağu 2026 |
32İzleyin | CVE-2026-62385İstismar yok | NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readersnltk · nltk · CWE-73 | Yüksek8,2 | — | %0,4 | 22 Ağu 2026 |
31İzleyin | CVE-2021-43854İstismar yok | Inefficient Regular Expression Complexity in nltknltk · nltk · CWE-400 | Yüksek7,5 | — | %2,6 | 23 Ara 2021 |
- CVE-2026-084840Planlayın
Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading
KritikCVSS 10,0Kavram kanıtıEPSS %1nltk · nltk5 Mar 2026
- CVE-2024-3970539İzleyin
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download fun
KritikCVSS 9,8İstismar yokEPSS %127 Haz 2024
- CVE-2026-7965737İzleyin
NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization
KritikCVSS 9,3İstismar yokEPSS %1nltk · nltk25 Ağu 2026
- CVE-2026-7967537İzleyin
NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
KritikCVSS 9,3İstismar yokEPSS %1nltk · nltk25 Ağu 2026
- CVE-2026-7868337İzleyin
NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization
KritikCVSS 9,4İstismar yokEPSS %1nltk · nltk25 Ağu 2026
- CVE-2025-1400935İzleyin
Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution
YüksekCVSS 8,8İstismar yokEPSS %1nltk · nltk18 Şub 2026
- CVE-2026-7967435İzleyin
NLTK 3.10.2 Path Traversal via corpus-reader constructors
YüksekCVSS 8,8İstismar yokEPSS %0nltk · nltk25 Ağu 2026
- CVE-2026-7151334İzleyin
NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk22 Ağu 2026
- CVE-2026-6331234İzleyin
NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk22 Ağu 2026
- CVE-2026-8020534İzleyin
NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk26 Ağu 2026
- CVE-2026-6238434İzleyin
NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk22 Ağu 2026
- CVE-2026-7868134İzleyin
NLTK before 3.10.3 Entity Expansion DoS via ElementTree
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk25 Ağu 2026
- CVE-2026-8172234İzleyin
nltk PorterStemmer before 3.10.3 Quadratic-time DoS
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk27 Ağu 2026
- CVE-2026-6639334İzleyin
NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk22 Ağu 2026
- CVE-2026-6238834İzleyin
NLTK before 3.10.0 Insecure Default Configuration in pathsec.py
YüksekCVSS 8,7İstismar yokEPSS %1nltk · nltk22 Ağu 2026
- CVE-2026-7868234İzleyin
NLTK before 3.10.3 SSRF Protection Bypass via Proxy
YüksekCVSS 8,7İstismar yokEPSS %0nltk · nltk25 Ağu 2026
- CVE-2025-7140834İzleyin
NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
YüksekCVSS 8,5İstismar yokEPSS %0nltk · nltk24 Tem 2026
- CVE-2026-7062634İzleyin
NLTK before 3.9.4 Symlink Escape via CorpusReader
YüksekCVSS 8,6İstismar yokEPSS %0nltk · nltk22 Ağu 2026
- CVE-2026-8172633İzleyin
NLTK through 3.10.3 Path Traversal via Model-Artifact APIs
YüksekCVSS 8,3İstismar yokEPSS %0nltk · nltk27 Ağu 2026
- CVE-2019-1475132İzleyin
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) i
YüksekCVSS 7,5Kavram kanıtıEPSS %6nltk · nltk22 Ağu 2019
- CVE-2026-3323632İzleyin
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
YüksekCVSS 8,1İstismar yokEPSS %1nltk · nltk20 Mar 2026
- CVE-2026-7967632İzleyin
NLTK before 3.10.3 Path Traversal via Symlink Bypass
YüksekCVSS 8,2İstismar yokEPSS %0nltk · nltk25 Ağu 2026
- CVE-2026-8020632İzleyin
NLTK 3.10.2 Regular Expression Denial of Service via tgrep
YüksekCVSS 8,2İstismar yokEPSS %0nltk · nltk26 Ağu 2026
- CVE-2026-6238532İzleyin
NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers
YüksekCVSS 8,2İstismar yokEPSS %0nltk · nltk22 Ağu 2026
- CVE-2021-4385431İzleyin
Inefficient Regular Expression Complexity in nltk
YüksekCVSS 7,5İstismar yokEPSS %3nltk · nltk23 Ara 2021