Known vulnerabilities in Natural Language Toolkit - page 2

Vendor: nltk.org
Software: Natural Language Toolkit
Software CPE: cpe:2.3:a:nltk.org:nltk:*:*:*:*:*:*:*:*
Website: https://www.nltk.org/
Total vulnerabilities: 41
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Natural Language Toolkit Natural Language Toolkit is affected by 41 known vulnerabilities: 6 high, 28 medium, 7 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141419 - Deserialization of Untrusted Data
 CWE-502 High
No
No
 3.10.0 11.08.2026 SB2026080753
#VU141255 - Improper Link Resolution Before File Access ('Link Following')
 CWE-59 Low
No
No
 3.9.4 07.08.2026 SB2026031817
#VU141253 - Improper Access Control
 CWE-284 Low
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141251 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141250 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141248 - Insecure Default Initialization of Resource
 CWE-1188 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141247 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141246 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54293		 CWE-22 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141245 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54294		 CWE-22 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141244 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54292		 CWE-22 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141243 - Inefficient Regular Expression Complexity
CVE-2026-54295		 CWE-1333 Medium
No
No
 3.10.0 07.08.2026 SB2026080753
#VU141240 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33236		 CWE-22 High
No
No
 3.9.4 07.08.2026 SB2026031817
#VU141239 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33230		 CWE-79 Medium
No
No
 3.9.4 07.08.2026 SB2026031817
#VU141238 - Missing Authentication for Critical Function
CVE-2026-33231		 CWE-306 Medium
No
No
 3.9.4 07.08.2026 SB2026031817
#VU124091 - Uncontrolled Recursion
 CWE-674 Medium
Available
No
 3.9.4 18.03.2026 SB2026031817
#VU105953 - Inefficient Regular Expression Complexity
CVE-2021-3828		 CWE-1333 Medium
No
No
 3.6.4 24.03.2025 SB2021092725
#VU105952 - Inefficient Regular Expression Complexity
CVE-2021-43854		 CWE-1333 Medium
No
No
 3.6.6 24.03.2025 SB2021122321
SB2025032402
#VU105951 - Inefficient Regular Expression Complexity
CVE-2021-3842		 CWE-1333 Medium
No
No
 3.6.6 24.03.2025 SB2021122321
SB2025032402
#VU96903 - Deserialization of Untrusted Data
CVE-2024-39705		 CWE-502 High
No
No
 3.8.2 05.09.2024 SB20240905107
SB20240905108
SB2024100965
and 5 more


Showing elements 21 - 40 out of 41