https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:07:50.939387+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-126304 CVE-2026-126304 — NLTK 3.10.0 before 3.10.4 Symlink Escape in YCOECorpusReader 2026-11-15T07:07:50.940845+00:00

Affected: nltk

NLTK from 3.10.0 before 3.10.4 contains a symlink escape vulnerability in YCOECorpusReader that allows attackers to read files outside the corpus root by planting psd or pos directory symlinks. Attackers controlling a YCOE corpus can make parsed_sents() and tagged_words() return file content from other corpora or temporary files within the NLTK data sandbox.