CVE-2026-71513
2 advisories.
PyPI/nltk CVE-2026-71513: high 8.8, EPSS 1.10%
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution
Action: Upgrade nltk to 3.10.3 or later.
pip install nltk==3.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.10.0 | 3.10.3 | - |
Fixed versions
| 3.10.3 |
Sources
- osv: GHSA-5gh2-94qg-qppq
- https://nvd.nist.gov/vuln/detail/CVE-2026-71513
- https://github.com/nltk/nltk/commit/c3e37113742a1ebeeb4f2ca58941f320f98805ea
- https://github.com/nltk/nltk
- https://github.com/nltk/nltk/blob/v3.10.2/nltk/picklesec.py#L119-L124
- https://www.vulncheck.com/advisories/nltk-through-remote-code-execution-via-allowlistunpickler-dotted-name-bypass
CVE-2026-71513 · published · modified · JSON
PyPI/nltk CVE-2026-71513: high 8.8, EPSS 1.10%
NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution
Action: Upgrade nltk to 3.10.3 or later.
pip install nltk==3.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.10.0 | 3.10.3 | - |
Fixed versions
| 3.10.3 |
Sources
- osv: PYSEC-2026-3867
- https://nvd.nist.gov/vuln/detail/CVE-2026-71513
- https://github.com/nltk/nltk/commit/c3e37113742a1ebeeb4f2ca58941f320f98805ea
- https://github.com/nltk/nltk
- https://github.com/nltk/nltk/blob/v3.10.2/nltk/picklesec.py#L119-L124
- https://www.vulncheck.com/advisories/nltk-through-remote-code-execution-via-allowlistunpickler-dotted-name-bypass
- https://pypi.org/project/nltk
- https://github.com/advisories/GHSA-5gh2-94qg-qppq
CVE-2026-71513 · published · modified · JSON