apk package
chainguard/py3.12-nltk-bin
pkg:apk/chainguard/py3.12-nltk-bin
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-39705 | Cri | 9.8 | < 3.8.2-r0 | 3.8.2-r0 | Jun 27, 2024 | NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt. |
- affected < 3.8.2-r0fixed 3.8.2-r0
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.