{"uuid": "5a5b1483-d6f7-4538-959a-b9759fe03f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12243", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mphu4lougb2t", "content": "NLTK 3.9.4 has a HIGH severity path traversal flaw \u2014 percent-encoded payloads can read files via nltk.data.load(). Affects web/NLP apps &amp; Jupyter. Review usage and restrict resource input. https://radar.offseq.com/threat/cve-2026-12243-cwe-22-improper-limitation-of-a-pat-3eae11979fc43a41 #OffSeq ...", "creation_timestamp": "2026-06-30T01:30:29.868277Z"}