CVE Tools

Nltk

32 CVEs tracked since 2026. Since Aug 2026, none of them reached CISA KEV.

Nltk CVEs per month

Aug 2026 to Aug 2026. Point at a month, or focus the strip and use the arrow keys.
Nltk CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-08320

Products

The products that kept showing up in Nltk's monthly top three, with their CVEs summed over those months.

  1. Nltk311 month
  2. Nltk/nltk31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Nltk.

  1. CVE-2026-81727NLTK before 3.10.3 Hardlink File Overwrite via downloader7.1
  2. CVE-2026-81725NLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader3.7
  3. CVE-2026-81726NLTK through 3.10.3 Path Traversal via Model-Artifact APIs7.0
  4. CVE-2026-81724NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion5.3
  5. CVE-2026-81723NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView3.7
  6. CVE-2026-81722nltk PorterStemmer before 3.10.3 Quadratic-time DoS7.5
  7. CVE-2026-80206NLTK 3.10.2 Regular Expression Denial of Service via tgrep5.9
  8. CVE-2026-80205NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex7.5
  9. CVE-2026-79676NLTK before 3.10.3 Path Traversal via Symlink Bypass5.9
  10. CVE-2026-79675NLTK before 3.10.3 JVM Argument Injection via Per-Call Options9.8
  11. CVE-2026-79674NLTK 3.10.2 Path Traversal via corpus-reader constructors8.2
  12. CVE-2026-79657NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization9.8
  13. CVE-2026-78683NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization9.6
  14. CVE-2026-78682NLTK before 3.10.3 SSRF Protection Bypass via Proxy7.5
  15. CVE-2026-78681NLTK before 3.10.3 Entity Expansion DoS via ElementTree7.5

The record

Peak rank
#46 in Aug 2026
Busiest month shown
Aug 2026, 32 CVEs
Months with a KEV entry
0 since Aug 2026
Monthly snapshots
1 since 2026
Nltk's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store