| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-54293 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | NLTK (Natural Language Toolkit) is a suite of open source Python modul ... |
| CVE-2026-33236 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | NLTK (Natural Language Toolkit) is a suite of open source Python modul ... |
| CVE-2026-33231 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | NLTK (Natural Language Toolkit) is a suite of open source Python modul ... |
| CVE-2026-33230 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | NLTK (Natural Language Toolkit) is a suite of open source Python modul ... |
| CVE-2026-12876 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | |
| CVE-2026-12841 | vulnerable | vulnerable | vulnerable (no DSA) | vulnerable | fixed | |
| CVE-2026-12372 | vulnerable | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk ... |
| CVE-2026-12261 | vulnerable | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 al ... |
| CVE-2026-12259 | vulnerable | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | In nltk version 3.9.4, the `nltk.downloader.Downloader._download_packa ... |
| CVE-2026-12252 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | fixed | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface class ... |
| CVE-2026-12243 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | NLTK version 3.9.4 is vulnerable to a path traversal attack due to an ... |
| CVE-2026-12199 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows u ... |
| CVE-2026-12074 | vulnerable | vulnerable | vulnerable (no DSA) | fixed | fixed | |
| CVE-2026-12072 | vulnerable | vulnerable | vulnerable (no DSA) | fixed | fixed | |
| CVE-2026-12061 | vulnerable | vulnerable | vulnerable (no DSA) | fixed | fixed | |
| CVE-2026-0848 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due t ... |
| CVE-2026-0847 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | A vulnerability in NLTK versions up to and including 3.9.2 allows arbi ... |
| CVE-2026-0846 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | A vulnerability in the `filestring()` function of the `nltk.util` modu ... |
| CVE-2025-71408 | vulnerable | vulnerable | vulnerable (no DSA) | fixed | fixed | NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval ... |
| CVE-2025-14009 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | A critical vulnerability exists in the NLTK downloader component of nl ... |
| CVE-2024-39705 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | fixed | fixed | fixed | NLTK through 3.8.1 allows remote code execution if untrusted packages ... |
| CVE-2021-43854 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | NLTK (Natural Language Toolkit) is a suite of open source Python modul ... |
| CVE-2021-3842 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | nltk is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-3828 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | nltk is vulnerable to Inefficient Regular Expression Complexity |