Skip to content
Threat Feed
Subscribe

Product

NLTK (< 3.9.3)

1 brief RSS
high advisory

NLTK Downloader Module Integrity Vulnerability

NLTK versions prior to 3.9.3 fail to verify package integrity after download, allowing remote attackers to perform MitM or DNS poisoning attacks to inject and execute arbitrary code.

NLTK +2 cve-2026-63312 path-traversal library-vulnerability python
4t 1c