Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

nltk

47 known vulnerabilities (6 critical, 29 high, 9 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
3.10.4 (Oct 21, 2026): no advisory with comparable ranges affects it; 43 advisories (CVE-2026-109956, CVE-2026-81727, CVE-2026-81726, …) can't be checked against versions
Newest unaffected release
3.10.4 (Oct 21, 2026), the latest release, not counting 43 advisories without comparable ranges
Advisories
47 · 6 critical, 29 high, 9 medium, 2 low
Weekly downloads
10.2M
Dependents
6,279
Releases
60 since 2.0.1 (May 15, 2012)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-109956
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-81727
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-81726
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-81725
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-81724
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-81723
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-81722
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-80206
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-80205
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-79676
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-79675
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-79674
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
Show all 47 advisoriesShow fewer advisories
  • CVE-2026-79657
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-78683
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-78682
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-78681
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-78680
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-70626
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-66393
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-65915
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-63312
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-63311
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-62388
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-62385
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-62384
    Affects 3.10.0 to 3.10.1 (3.10.2 is outside it)
  • CVE-2026-62383
    Affects 3.10.0 to 3.10.1 (3.10.2 is outside it)
  • CVE-2026-71514
    Affects 3.9.4 to 3.10.2 (3.10.3 is outside it)
  • CVE-2026-71513
    Affects 3.10.0 to 3.10.2 (3.10.3 is outside it)
  • CVE-2026-72818
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-12372
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-12261
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-12259
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2025-71408
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-12252
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-54293
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-33236
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-33231
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-33230
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-0846
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-0848
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2026-0847
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2025-14009
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2024-39705
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2021-3842
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2021-43854
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2021-3828
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
  • CVE-2019-14751
    Its ranges can't be placed on these versions
    Its ranges can't be placed on these versions
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 47

  • NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path

    Affected: fixed in 3.10.4.

  • CVE-2026-81727Medium 6.9

    NLTK before 3.10.3 Hardlink File Overwrite via downloader

    Affected: fixed in 3.10.3.

  • NLTK through 3.10.3 Path Traversal via Model-Artifact APIs

    Affected: through 3.10.3; fixed in 3.10.3.

  • CVE-2026-81725Medium 6.3

    NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader

    Affected: fixed in 3.10.3.

  • CVE-2026-81724Medium 6.9

    NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion

    Affected: fixed in 3.10.3.

  • CVE-2026-81723Medium 6.3

    NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView

    Affected: fixed in 3.10.3.

  • nltk PorterStemmer before 3.10.3 Quadratic-time DoS

    Affected: fixed in 3.10.3.

  • NLTK 3.10.2 Regular Expression Denial of Service via tgrep

    Affected: fixed in 3.10.3.

  • NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

    Affected: fixed in 3.10.0.

  • NLTK before 3.10.3 Path Traversal via Symlink Bypass

    Affected: fixed in 3.10.3.

  • CVE-2026-79675Critical 9.3

    NLTK before 3.10.3 JVM Argument Injection via Per-Call Options

    Affected: fixed in 3.10.3.

  • NLTK 3.10.2 Path Traversal via corpus-reader constructors

    Affected: fixed in 3.10.3.

  • CVE-2026-79657Critical 9.3

    NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization

    Affected: fixed in 3.10.3.

  • CVE-2026-78683Critical 9.4

    NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization

    Affected: fixed in 3.10.0.

  • NLTK before 3.10.3 SSRF Protection Bypass via Proxy

    Affected: fixed in 3.10.3.

Show all 47 advisoriesShow fewer advisories

  • NLTK before 3.10.3 Entity Expansion DoS via ElementTree

    Affected: fixed in 3.10.3.

  • NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary

    Affected: fixed in 3.10.3.

  • NLTK before 3.9.4 Symlink Escape via CorpusReader

    Affected: fixed in 3.9.4.

  • NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder

    Affected: fixed in 3.9.4.

  • NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer

    Affected: fixed in 3.10.0.

  • NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read

    Affected: fixed in 3.10.0.

  • CVE-2026-63311Medium 6.9

    NLTK before 3.10.0 SSRF via DNS Resolution Failure

    Affected: fixed in 3.10.0.

  • NLTK before 3.10.0 Insecure Default Configuration in pathsec.py

    Affected: fixed in 3.10.0.

  • NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers

    Affected: fixed in 3.10.0.

  • NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2

    Affected: from 3.10.0, fixed in 3.10.2.

    Fixed in 3.10.2 (released Aug 5, 2026, 17 days before disclosure).

    The latest release, 3.10.4, is not affected.

  • CVE-2026-62383Medium 6.8

    nltk IPIPANCorpusReader Symlink Arbitrary File Read

    Affected: from 3.10.0, fixed in 3.10.2.

    Fixed in 3.10.2 (released Aug 5, 2026, 17 days before disclosure).

    The latest release, 3.10.4, is not affected.

  • NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass

    Affected: from 3.9.4, fixed in 3.10.3.

    Fixed in 3.10.3 (released Aug 12, 2026, 10 days before disclosure).

    The latest release, 3.10.4, is not affected.

  • NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass

    Affected: from 3.10.0, fixed in 3.10.3.

    Fixed in 3.10.3 (released Aug 12, 2026, 10 days before disclosure).

    The latest release, 3.10.4, is not affected.

  • NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input

    Affected: fixed in 3.10.1.

  • Server-Side Request Forgery (SSRF) in nltk/nltk

    Affected: through 3.9.4; fixed in 3.10.0.

  • CVE-2026-12261Medium 5.3

    Improper Access Control in nltk/nltk

    Affected: fixed in 3.10.0.

  • CVE-2026-12259Medium 5.3

    Improper Input Validation in nltk/nltk

    Affected: through 3.9.4; fixed in 3.9.3.

  • NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments

    Affected: fixed in 3.9.3.

  • Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk

    Affected: fixed in 3.9.4.

  • NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

    Affected: fixed in 3.10.0.

  • NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

    Affected: fixed in 3.9.4; through 3.9.2.

  • NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

    Affected: fixed in 3.9.4.

  • CVE-2026-33230Medium 6.1

    nltk Vulnerable to Cross-site Scripting

    Affected: fixed in 3.9.4.

  • Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

    Affected: fixed in 3.9.3; through 3.9.2.

  • CVE-2026-0848Critical 10.0

    Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

    Affected: fixed in 3.9.3.

  • Path Traversal in nltk/nltk

    Affected: through 3.9.2.

  • CVE-2025-14009Critical 10.0

    Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

    Affected: fixed in 3.9.3.

  • CVE-2024-39705Critical 9.8

    NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download…

    Affected: fixed in 3.9.

  • Inefficient Regular Expression Complexity in nltk/nltk

    Affected: fixed in 3.6.6.

  • Inefficient Regular Expression Complexity in nltk

    Affected: fixed in 3.6.5; fixed in 3.6.6.

  • Inefficient Regular Expression Complexity in nltk/nltk

    Affected: fixed in 3.6.4.

  • NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash)…

    Affected: fixed in 3.4.5; fixed in 3.4.5.