- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/15/2026, nltk recorded 29 security vulnerabilities in the last 90 days, of which 22 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of nltk and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-109956NLTK through 3.10.3 Path Traversal via WekaClassifier Model PathCVE-2026-81727NLTK before 3.10.3 Hardlink File Overwrite via downloaderCVE-2026-81726NLTK through 3.10.3 Path Traversal via Model-Artifact APIsCVE-2026-81725NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReaderCVE-2026-81724NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-109956NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path | Exploitation statusNot confirmed | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-81727NLTK before 3.10.3 Hardlink File Overwrite via downloader | Exploitation statusActively exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-81726NLTK through 3.10.3 Path Traversal via Model-Artifact APIs | Exploitation statusActively exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-81725NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader | Exploitation statusNot exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-81724NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion | Exploitation statusActively exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-81723NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView | Exploitation statusActively exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-81722nltk PorterStemmer before 3.10.3 Quadratic-time DoS | Exploitation statusActively exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-80206NLTK 3.10.2 Regular Expression Denial of Service via tgrep | Exploitation statusActively exploited | FixYes | Published08/26/2026 | SeverityHigh |
CVE-2026-80205NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex | Exploitation statusNot exploited | FixYes | Published08/26/2026 | SeverityHigh |
CVE-2026-79676NLTK before 3.10.3 Path Traversal via Symlink Bypass | Exploitation statusActively exploited | FixYes | Published08/25/2026 | SeverityHigh |
49 Results | Page 1 of 5