Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

NLTK before 3.10.3 JVM Argument Injection via Per-Call Options

NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization

NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization

NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass

Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

NLTK 3.10.2 Path Traversal via corpus-reader constructors

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary

NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments

Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk

nltk PorterStemmer before 3.10.3 Quadratic-time DoS

NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

NLTK before 3.10.3 SSRF Protection Bypass via Proxy

NLTK before 3.10.3 Entity Expansion DoS via ElementTree

NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder

NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read

NLTK before 3.10.0 Insecure Default Configuration in pathsec.py

NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers

NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2

NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input

NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

Path Traversal in nltk/nltk

nltk is vulnerable to Inefficient Regular Expression Complexity

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing

nltk is vulnerable to Inefficient Regular Expression Complexity

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is…

NLTK before 3.10.3 Hardlink File Overwrite via downloader

NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path

NLTK through 3.10.3 Path Traversal via Model-Artifact APIs

NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer

Improper Access Control in nltk/nltk

Improper Input Validation in nltk/nltk

NLTK before 3.9.4 Symlink Escape via CorpusReader

nltk Vulnerable to Cross-site Scripting

NLTK 3.10.2 Regular Expression Denial of Service via tgrep

NLTK before 3.10.3 Path Traversal via Symlink Bypass

nltk IPIPANCorpusReader Symlink Arbitrary File Read

NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion

NLTK before 3.10.0 SSRF via DNS Resolution Failure

NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader

NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView

Server-Side Request Forgery (SSRF) in nltk/nltk

NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass