PyPI/nltk CVE-2021-43854: unknown, EPSS 2.79%
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulne
Action: Upgrade nltk to 3.6.5 or later.
pip install nltk==3.6.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.5 | - |
Fixed versions
| 3.6.5 |
Sources
- osv: PYSEC-2021-859
- https://github.com/nltk/nltk/pull/2869
- https://github.com/nltk/nltk/commit/1405aad979c6b8080dbbc8e0858f89b2e3690341
- https://github.com/nltk/nltk/security/advisories/GHSA-f8m6-h2c7-8h9x
- https://github.com/nltk/nltk/issues/2866
CVE-2021-43854 · published · modified · JSON