# cve.now: Nltk

The newest entries naming Nltk as an affected vendor (up to 200), of 45 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-109956](https://cve.now/CVE-2026-109956.md): NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path (CVSS 8.3)
- [CVE-2026-81727](https://cve.now/CVE-2026-81727.md): NLTK before 3.10.3 Hardlink File Overwrite via downloader (CVSS 6.9)
- [CVE-2026-81726](https://cve.now/CVE-2026-81726.md): NLTK through 3.10.3 Path Traversal via Model-Artifact APIs (CVSS 8.3)
- [CVE-2026-81725](https://cve.now/CVE-2026-81725.md): NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader (CVSS 6.3)
- [CVE-2026-81724](https://cve.now/CVE-2026-81724.md): NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion (CVSS 6.9)
- [CVE-2026-81723](https://cve.now/CVE-2026-81723.md): NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView (CVSS 6.3)
- [CVE-2026-81722](https://cve.now/CVE-2026-81722.md): nltk PorterStemmer before 3.10.3 Quadratic-time DoS (CVSS 8.7)
- [CVE-2026-80206](https://cve.now/CVE-2026-80206.md): NLTK 3.10.2 Regular Expression Denial of Service via tgrep (CVSS 8.2)
- [CVE-2026-80205](https://cve.now/CVE-2026-80205.md): NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex (CVSS 8.7)
- [CVE-2026-79676](https://cve.now/CVE-2026-79676.md): NLTK before 3.10.3 Path Traversal via Symlink Bypass (CVSS 8.2)
- [CVE-2026-79675](https://cve.now/CVE-2026-79675.md): NLTK before 3.10.3 JVM Argument Injection via Per-Call Options (CVSS 9.3)
- [CVE-2026-79674](https://cve.now/CVE-2026-79674.md): NLTK 3.10.2 Path Traversal via corpus-reader constructors (CVSS 8.8)
- [CVE-2026-79657](https://cve.now/CVE-2026-79657.md): NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization (CVSS 9.3)
- [CVE-2026-78683](https://cve.now/CVE-2026-78683.md): NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization (CVSS 9.4)
- [CVE-2026-78682](https://cve.now/CVE-2026-78682.md): NLTK before 3.10.3 SSRF Protection Bypass via Proxy (CVSS 8.7)
- [CVE-2026-78681](https://cve.now/CVE-2026-78681.md): NLTK before 3.10.3 Entity Expansion DoS via ElementTree (CVSS 8.7)
- [CVE-2026-78680](https://cve.now/CVE-2026-78680.md): NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary (CVSS 8.5)
- [CVE-2026-70626](https://cve.now/CVE-2026-70626.md): NLTK before 3.9.4 Symlink Escape via CorpusReader (CVSS 8.6)
- [CVE-2026-66393](https://cve.now/CVE-2026-66393.md): NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder (CVSS 8.7)
- [CVE-2026-65915](https://cve.now/CVE-2026-65915.md): NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer (CVSS 7.1)
- [CVE-2026-63312](https://cve.now/CVE-2026-63312.md): NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read (CVSS 8.7)
- [CVE-2026-63311](https://cve.now/CVE-2026-63311.md): NLTK before 3.10.0 SSRF via DNS Resolution Failure (CVSS 6.9)
- [CVE-2026-62388](https://cve.now/CVE-2026-62388.md): NLTK before 3.10.0 Insecure Default Configuration in pathsec.py (CVSS 8.7)
- [CVE-2026-62385](https://cve.now/CVE-2026-62385.md): NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers (CVSS 8.2)
- [CVE-2026-62384](https://cve.now/CVE-2026-62384.md): NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 (CVSS 8.7)
- [CVE-2026-62383](https://cve.now/CVE-2026-62383.md): nltk IPIPANCorpusReader Symlink Arbitrary File Read (CVSS 6.8)
- [CVE-2026-71514](https://cve.now/CVE-2026-71514.md): NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass (CVSS 2.0)
- [CVE-2026-71513](https://cve.now/CVE-2026-71513.md): NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass (CVSS 8.7)
- [CVE-2026-72818](https://cve.now/CVE-2026-72818.md): NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input (CVSS 8.7)
- [CVE-2026-12372](https://cve.now/CVE-2026-12372.md): Server-Side Request Forgery (SSRF) in nltk/nltk (CVSS 3.7)
- [CVE-2026-12261](https://cve.now/CVE-2026-12261.md): Improper Access Control in nltk/nltk (CVSS 5.3)
- [CVE-2026-12259](https://cve.now/CVE-2026-12259.md): Improper Input Validation in nltk/nltk (CVSS 5.3)
- [CVE-2026-12252](https://cve.now/CVE-2026-12252.md): Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk (CVSS 7.8)
- [CVE-2026-54293](https://cve.now/CVE-2026-54293.md): NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read (CVSS 7.5)
- [CVE-2026-12199](https://cve.now/CVE-2026-12199.md): Unauthenticated Denial of Service in nltk.app.wordnet\_app (CVSS 7.5)
- [CVE-2026-33236](https://cve.now/CVE-2026-33236.md): NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite (CVSS 8.1)
- [CVE-2026-33231](https://cve.now/CVE-2026-33231.md): NLTK has unauthenticated remote shutdown in nltk.app.wordnet\_app (CVSS 7.5)
- [CVE-2026-33230](https://cve.now/CVE-2026-33230.md): nltk Vulnerable to Cross-site Scripting (CVSS 6.1)
- [CVE-2026-0846](https://cve.now/CVE-2026-0846.md): Arbitrary File Read via Absolute Path Input in nltk.util.filestring() (CVSS 8.6)
- [CVE-2026-0848](https://cve.now/CVE-2026-0848.md): Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading (CVSS 10.0)
- [CVE-2026-0847](https://cve.now/CVE-2026-0847.md): Path Traversal in nltk/nltk (CVSS 8.6)
- [CVE-2025-14009](https://cve.now/CVE-2025-14009.md): Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution (CVSS 10.0)
- [CVE-2021-3842](https://cve.now/CVE-2021-3842.md): Inefficient Regular Expression Complexity in nltk/nltk (CVSS 7.5)
- [CVE-2021-43854](https://cve.now/CVE-2021-43854.md): Inefficient Regular Expression Complexity in nltk (CVSS 7.5)
- [CVE-2021-3828](https://cve.now/CVE-2021-3828.md): Inefficient Regular Expression Complexity in nltk/nltk (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/nltk
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.