N
Vendor security profile
nltk
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs46
Critical4
CISA KEV0
Public exploit36
Patch rate%22
Avg. CVSS7.7
12-month vulnerability rate
0
0
0
1
4
0
0
2
6
32
1
0
CVE KEV
CVE severity distribution
46toplam CVE
Critical4 (9%)
High31 (67%)
Medium9 (20%)
Low2 (4%)
Patch and exploitation view
%22
Verified patch
%0
CISA KEV
%78
Public exploit
10Patch available
0Partial
0Workaround
0Vendor: no patch
36Unknown
Latest vulnerabilities
6.9
CVE-2026-81727
NLTK before 3.10.3 Hardlink File Overwrite via downloader
N
Patch status unknownEPSS %0
8.3
CVE-2026-81726
NLTK through 3.10.3 Path Traversal via Model-Artifact APIs
N
Patch status unknownEPSS %0
6.3
CVE-2026-81725
NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader
N
Patch status unknownEPSS %0
6.9
CVE-2026-81724
NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion
N
Patch status unknownEPSS %0
6.3
CVE-2026-81723
NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView
N
Patch status unknownEPSS %0
8.7
CVE-2026-81722
nltk PorterStemmer before 3.10.3 Quadratic-time DoS
N
Patch status unknownEPSS %1
8.2
CVE-2026-80206
NLTK 3.10.2 Regular Expression Denial of Service via tgrep
N
Patch status unknownEPSS %0
8.7
CVE-2026-80205
NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
N
Patch status unknownEPSS %1
8.2
CVE-2026-79676
NLTK before 3.10.3 Path Traversal via Symlink Bypass
N
Patch status unknownEPSS %0
9.3
CVE-2026-79675
NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
N
Patch status unknownEPSS %1