Iniciar sesión
Deutsch English Español Polski
Media

In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. T

  • Publicada: 03.08.2026
  • Actualizado: 16.10.2026 13:17

In nltk version 3.9.4, the nltk.downloader.Downloader._download_package() function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised mirror, malicious proxy, or other source-substitution condition, leading to the installation of attacker-controlled package bytes. The vulnerability can result in malicious corpus or model content being trusted by downstream users or applications.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Python (PyPI) nltk <= 3.9.4 sin corrección

Referencias

Puntuación CVSS 6.5/10
Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Debilidad (CWE)
CWE-494
Plataforma
Python (PyPI)
Paquete
nltk
Publicada
03.08.2026
Actualizado
16.10.2026 13:17

Fuentes y licencias

OSV / GitHub Advisory Database - PYSEC-2026-3729 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-5wp5-5229-5g6q - CC BY 4.0

OSV / GitHub Advisory Database - GHSA-gf32-cmjh-8m9v - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2026-4318 - PyPA Advisory Database; CC BY 4.0

Historial de vulnerabilidades: nltk

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (52) en el archivo
Entradas en total
52
Primera → última
08.2019 09.2026
Sin corrección
6
Explotada en ataques
0

Distribución por gravedad

  • Crítica 5
  • Alta 32
  • Media 13
  • Baja 2

Divulgaciones por año

Gravedad:
  1. NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
    Alta · 7.8 CVE-2026-78680 < 3.10.3 3.10.3
  2. NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots
    Alta · 7.0 CVE-2026-81726 <= 3.10.3 sin corrección
  3. NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions
    Alta CVE-2026-80206 < 3.10.3 3.10.3
  4. NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
    Alta · 7.5 CVE-2026-80205 < 3.10.0 3.10.0
  5. NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
    Crítica · 9.8 CVE-2026-79675 < 3.10.3 3.10.3
  6. NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement
    Alta CVE-2026-79676 < 3.10.3 3.10.3
  7. NLTK: Corpus Reader Sandbox Bypass
    Alta CVE-2026-79674 < 3.10.3 3.10.3
  8. NLTK: Allowlisted pickle loaders still permit code execution in current source
    Crítica CVE-2026-79657 < 3.10.3 3.10.3
  9. NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
    Crítica CVE-2026-78683 < 3.10.0 3.10.0
  10. NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
    Alta CVE-2026-78681 < 3.10.3 3.10.3
  11. NLTK: pathsec SSRF protection can be bypassed when a proxy is configured
    Alta CVE-2026-78682 < 3.10.3 3.10.3
  12. NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution
    Alta · 8.8 CVE-2026-71513 >= 3.10.0, < 3.10.3 3.10.3
  13. NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root
    Alta · 6.2 CVE-2026-70626 < 3.9.4 3.9.4
  14. NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read
    Alta CVE-2026-63312 < 3.10.0 3.10.0
  15. NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)
    Alta · 7.5 CVE-2026-62384 >= 3.10.0, < 3.10.2 3.10.2
  16. NLTK: Stable FrameNet and NKJP readers parse outside-root XML
    Alta · 5.9 CVE-2026-62385 < 3.10.0 3.10.0
  17. NLTK: Default ENFORCE=False Disables All pathsec Security Controls
    Alta CVE-2026-62388 < 3.10.0 3.10.0
  18. NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking
    Alta · 7.5 CVE-2026-72818 < 3.10.1 3.10.1
  19. In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. T esta entrada
    Media · 6.5 CVE-2026-12259 <= 3.9.4 sin corrección
  20. Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode
    Alta · 8.6 CVE-2026-12075 < 3.10.0 3.10.0
  21. Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
    Alta · 7.5 CVE-2026-12061 < 3.10.0 3.10.0
  22. Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)
    Alta · 7.5 CVE-2026-12072 < 3.10.0 3.10.0
  23. Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)
    Alta · 7.5 CVE-2026-12074 < 3.10.0 3.10.0
  24. NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arb
    Alta CVE-2025-71408 < 3.9.3 3.9.3
  25. In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulner
    Alta · 7.8 CVE-2026-12252 < 3.9.4 3.9.4
  26. NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504. The `_UNSAFE_NO_PROTOCOL_RE` regex in `nltk/data.py` checks for literal `../` sequences but
    Alta · 7.5 CVE-2026-12243 <= 3.9.4 sin corrección
  27. Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
    Alta · 7.5 CVE-2026-54293 < 3.10.0 3.10.0
  28. NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
    Alta · 8.1 CVE-2026-33236 <= 3.9.2 sin corrección
  29. Unauthenticated remote shutdown in nltk.app.wordnet_app
    Alta · 7.5 CVE-2026-33231 < 3.9.4 3.9.4
  30. A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files s
    Alta · 7.5 CVE-2026-0846 <= 3.9.2 sin corrección
  31. NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verific
    Crítica · 10.0 CVE-2026-0848 < 3.9.3 3.9.3
  32. A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and Brack
    Alta · 7.5 CVE-2026-0847 < 3.9.3 3.9.3
  33. NLTK has a Zip Slip Vulnerability
    Crítica · 10.0 CVE-2025-14009 < 3.9.3 3.9.3
  34. ntlk unsafe deserialization vulnerability
    Alta · 7.5 CVE-2024-39705 < 3.9 3.9
  35. NLTK Vulnerable to REDoS
    Alta · 7.5 CVE-2021-3842 < 3.6.6 3.6.6
  36. Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
    Alta · 7.5 CVE-2021-43854 < 3.6.6 3.6.6
  37. NLTK Vulnerable to REDoS
    Alta · 7.5 CVE-2021-3828 < 3.6.4 3.6.4
  38. NLTK Vulnerable To Path Traversal
    Alta · 7.5 CVE-2019-14751 < 3.4.5 3.4.5

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.