Known vulnerabilities in Natural Language Toolkit

Vendor: nltk.org
Software: Natural Language Toolkit
Software CPE: cpe:2.3:a:nltk.org:nltk:*:*:*:*:*:*:*:*
Website: https://www.nltk.org/
Total vulnerabilities: 41
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Natural Language Toolkit Natural Language Toolkit is affected by 41 known vulnerabilities: 6 high, 28 medium, 7 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144679 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 3.10.3 24.08.2026 SB2026082498
#VU142781 - Improper Link Resolution Before File Access ('Link Following')
 CWE-59 Low
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142780 - External Control of File Name or Path
 CWE-73 Medium
No
No
 - 15.08.2026 SB2026081839
#VU142779 - Inefficient Regular Expression Complexity
 CWE-1333 Low
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142778 - Inefficient Algorithmic Complexity
 CWE-407 Low
No
No
 3.10.2 15.08.2026 SB2026081130
#VU142777 - Inefficient Algorithmic Complexity
 CWE-407 Medium
No
No
 3.9.3 15.08.2026 SB2026080754
#VU142776 - Inefficient Regular Expression Complexity
 CWE-1333 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142774 - Uncontrolled Recursion
 CWE-674 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142773 - Uncontrolled Recursion
CVE-2026-12876		 CWE-674 Medium
No
No
 3.9.3 15.08.2026 SB2026080754
#VU142772 - Inefficient Regular Expression Complexity
 CWE-1333 Medium
No
No
 3.10.0 15.08.2026 SB2026080753
#VU142771 - Improper Link Resolution Before File Access ('Link Following')
 CWE-59 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142770 - Argument Injection or Modification
 CWE-88 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142769 - External Control of File Name or Path
 CWE-73 Medium
No
No
 3.10.3 15.08.2026 SB2026081579
#VU142768 - Deserialization of Untrusted Data
 CWE-502 High
No
No
 3.10.3 15.08.2026 SB2026081579
#VU141418 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
 CWE-776 Medium
No
No
 3.10.3 11.08.2026 SB2026081579
#VU141417 - Untrusted Search Path
 CWE-426 Low
No
No
 3.10.3 11.08.2026 SB2026081579
#VU141416 - Improper Link Resolution Before File Access ('Link Following')
 CWE-59 Low
No
No
 3.10.2 11.08.2026 SB2026081130
#VU141415 - Improper Link Resolution Before File Access ('Link Following')
 CWE-59 Medium
No
No
 3.10.2 11.08.2026 SB2026081130
#VU141249 - Download of Code Without Integrity Check
 CWE-494 High
No
No
 3.9.3 07.08.2026 SB2026080754
#VU141242 - Server-Side Request Forgery (SSRF)
CVE-2026-54296		 CWE-918 High
No
No
 3.10.0 07.08.2026 SB2026080753


Showing elements 1 - 20 out of 41