Описание
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| nltk | fixed | 3.9.1-1 | package | |
| nltk | postponed | bookworm | package | |
| nltk | postponed | bullseye | package |
Примечания
https://github.com/nltk/nltk/issues/3266
https://github.com/nltk/nltk/issues/2522
EPSS
Связанные уязвимости
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.
EPSS