https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:43:32 +0000 https://vulnerability.circl.lu/vuln/cve-2019-14751 <p>NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.</p> <p>NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.</p> https://vulnerability.circl.lu/vuln/cve-2019-14751 https://vulnerability.circl.lu/vuln/ghsa-mr7p-25v2-35wr <p><strong>Affected:</strong> PyPI: nltk</p> <p>NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a `../` (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.</p> <p><strong>Affected:</strong> PyPI: nltk</p> <p>NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a `../` (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.</p> https://vulnerability.circl.lu/vuln/ghsa-mr7p-25v2-35wr https://vulnerability.circl.lu/vuln/pysec-2019-106 <p><strong>Affected:</strong> PyPI: nltk</p> <p>NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.</p> <p><strong>Affected:</strong> PyPI: nltk</p> <p>NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.</p> https://vulnerability.circl.lu/vuln/pysec-2019-106