CVE-2024-39705Critical · CVSS 9.8EPSS 1.35%No fix publishedCVE-2024-39705NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.nltkOperating systemsPublished June 27, 2024Updated September 15, 2024Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗