PatchFirst · Vulnérabilités récentes
La comparaison pour nltk 3.10.3 est incomplète. Consultez les correspondances confirmées ci-dessous.
Impossible de comparer 4 entrées. Les résultats sont incomplets.
Vulnérabilités : 2
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the model_filename or model argument can make the weka JVM write files via -d or probe files via -l outside allowed data roots.
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagger, and maxent parameter APIs when pathsec is enabled.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.