Known vulnerabilities in Natural Language Toolkit

Vendor: nltk.org
Software: Natural Language Toolkit
Software CPE: cpe:2.3:a:nltk.org:nltk:*:*:*:*:*:*:*:*
Website: https://www.nltk.org/
Total vulnerabilities: 41
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Natural Language Toolkit Natural Language Toolkit is affected by 41 known vulnerabilities: 6 high, 28 medium, 7 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144679 - Server-Side Request Forgery (SSRF)
CVE-2026-78682		 CWE-918 Medium
No
No
 3.10.3 24.08.2026 SB2026082498
#VU142781 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-81727		 CWE-59 Low
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142780 - External Control of File Name or Path
CVE-2026-81726		 CWE-73 Medium
No
No
 - 15.08.2026 SB2026081839
#VU142779 - Inefficient Regular Expression Complexity
CVE-2026-81725		 CWE-1333 Low
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142778 - Inefficient Algorithmic Complexity
CVE-2026-81723		 CWE-407 Low
No
No
 3.10.2 15.08.2026 SB2026081130
#VU142777 - Inefficient Algorithmic Complexity
CVE-2026-81722		 CWE-407 Medium
No
No
 3.9.3 15.08.2026 SB2026080754
#VU142776 - Inefficient Regular Expression Complexity
CVE-2026-80206		 CWE-1333 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142774 - Uncontrolled Recursion
CVE-2026-81724		 CWE-674 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142773 - Uncontrolled Recursion
CVE-2026-12876		 CWE-674 Medium
No
No
 3.9.3 15.08.2026 SB2026080754
#VU142771 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-79676		 CWE-59 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142770 - Argument Injection or Modification
CVE-2026-79675		 CWE-88 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142769 - External Control of File Name or Path
CVE-2026-79674		 CWE-73 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142768 - Deserialization of Untrusted Data
CVE-2026-79657		 CWE-502 High
No
No
 3.10.3 15.08.2026 SB2026081579
#VU141418 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2026-78681		 CWE-776 Medium
No
No
 3.10.3 11.08.2026 SB2026081579
#VU141417 - Untrusted Search Path
CVE-2026-78680		 CWE-426 Low
No
No
 3.10.3 11.08.2026 SB2026081579
#VU141416 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-62383		 CWE-59 Low
No
No
 3.10.2 11.08.2026 SB2026081130
#VU141415 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-62384		 CWE-59 Medium
No
No
 3.10.2 11.08.2026 SB2026081130
#VU141253 - Improper Access Control
CVE-2026-65915		 CWE-284 Low
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141249 - Download of Code Without Integrity Check
CVE-2026-63310		 CWE-494 High
No
No
 3.9.3 07.08.2026 SB2026080754
#VU141244 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54292		 CWE-22 Medium
No
No
 3.10.0 07.08.2026 SB2026080753


Showing elements 1 - 20 out of 41