NLTK · GHSA-7r4r-6ppg-7ff8 · Package
NO FIX YET · SEE WHAT TO DO
This advisory is a withdrawn duplicate of GHSA-qg35-44qx-7vrr. The original text says NLTK's YCOECorpusReader follows psd or pos directory symlinks, so a planted corpus can read files outside the corpus root inside the NLTK data sandbox.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Applications that load YCOE corpora from untrusted or user-supplied locations through NLTK's YCOECorpusReader are exposed. Projects that only read their own bundled corpora can skip it. The advisory is withdrawn as a duplicate, so the live details sit in GHSA-qg35-44qx-7vrr.
Not affected if nltk-3.10.4-or-later, trusted-corpora-only
Who cares nltk, python
pip show nltk and compare the version with 3.10.4.3.10.4 or later (per the product range in this advisory).This advisory has been withdrawn because it is a duplicate of GHSA-qg35-44qx-7vrr. This link is maintained to preserve external references.
NLTK from 3.10.0 before 3.10.4 contains a symlink escape vulnerability in YCOECorpusReader that allows attackers to read files outside the corpus root by planting psd or pos directory symlinks. Attackers controlling a YCOE corpus can make parsed_sents() and tagged_words() return file content from other corpora or temporary files within the NLTK data sandbox.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GitHub Advisory Database, CC-BY 4.0. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.