nltk vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 202641
3. 20261

Newest CVEs

• CVE-2026-109956

  NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path

  nltk · nltk

  High8.3
• CVE-2026-81727

  NLTK before 3.10.3 Hardlink File Overwrite via downloader

  nltk · nltk

  Medium6.9
• CVE-2026-81726

  NLTK through 3.10.3 Path Traversal via Model-Artifact APIs

  nltk · nltk

  High8.3
• CVE-2026-81725

  NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader

  nltk · nltk

  Medium6.3
• CVE-2026-81724

  NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion

  nltk · nltk

  Medium6.9
• CVE-2026-81723

  NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView

  nltk · nltk

  Medium6.3
• CVE-2026-81722

  nltk PorterStemmer before 3.10.3 Quadratic-time DoS

  nltk · nltk

  High8.7
• CVE-2026-80206

  NLTK 3.10.2 Regular Expression Denial of Service via tgrep

  nltk · nltk

  High8.2
• CVE-2026-80205

  NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

  nltk · nltk

  High8.7
• CVE-2026-79676

  NLTK before 3.10.3 Path Traversal via Symlink Bypass

  nltk · nltk

  High8.2