Количество 5
Количество 5
CVE-2026-79657
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading.
CVE-2026-79657
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading.
CVE-2026-79657
NLTK versions before 3.10.3 contain a remote code execution vulnerabil ...
GHSA-x99w-6fgc-pmfw
NLTK: Allowlisted pickle loaders still permit code execution in current source
BDU:2026-12702
Уязвимость функции punkt_pickle_load() пакета библиотек для символьной и статистической обработки естественного языка NLTK, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-79657 NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading. | CVSS3: 9.8 | 1% Низкий | 27 дней назад |
 | CVE-2026-79657 NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading. | CVSS3: 9.8 | 1% Низкий | 27 дней назад |
| CVE-2026-79657 NLTK versions before 3.10.3 contain a remote code execution vulnerabil ... | CVSS3: 9.8 | 1% Низкий | 27 дней назад |
| GHSA-x99w-6fgc-pmfw NLTK: Allowlisted pickle loaders still permit code execution in current source | 1% Низкий | 13 дней назад | |
 | BDU:2026-12702 Уязвимость функции punkt_pickle_load() пакета библиотек для символьной и статистической обработки естественного языка NLTK, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | около 1 месяца назад |
Уязвимостей на страницу