https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:41:23.408133+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03231 bdu:2019-03231 2026-10-06T15:41:23.465459+00:00 bdu:2019-03231 https://cve.radiocsirt.org/vuln/euvd-2026-56570 EUVD-2026-56570 2026-10-06T15:41:23.465502+00:00 EUVD-2026-56570 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14751 fkie_cve-2019-14751 2026-10-06T15:41:23.465516+00:00

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.

 https://cve.radiocsirt.org/vuln/ghsa-mr7p-25v2-35wr GHSA-mr7p-25v2-35wr — NLTK Vulnerable To Path Traversal 2026-10-06T15:41:23.465547+00:00

Affected: PyPI: nltk

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a `../` (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.

 https://cve.radiocsirt.org/vuln/gsd-2019-14751 gsd-2019-14751 2026-10-06T15:41:23.465569+00:00 gsd-2019-14751 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0436-1 openSUSE-SU-2020:0436-1 — Security update for python-nltk 2026-10-06T15:41:23.465581+00:00

Security update for python-nltk

 https://cve.radiocsirt.org/vuln/pysec-2019-106 PYSEC-2019-106 2026-10-06T15:41:23.465598+00:00

Affected: PyPI: nltk

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14751 UBUNTU-CVE-2019-14751 2026-10-06T15:41:23.465617+00:00

Affected: Ubuntu:Pro:14.04:LTS: nltk, Ubuntu:16.04:LTS: nltk, Ubuntu:18.04:LTS: nltk

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.