GHSA-vp9c-2pjm-8925

Source

https://github.com/advisories/GHSA-vp9c-2pjm-8925

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-vp9c-2pjm-8925/GHSA-vp9c-2pjm-8925.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-vp9c-2pjm-8925

Withdrawn

2026-09-02T14:41:02Z

Published

2026-08-25T12:31:25Z

Modified

2026-09-02T15:00:09Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

Duplicate Advisory: Allowlisted pickle loaders still permit code execution in current source

Details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-x99w-6fgc-pmfw. This link is maintained to preserve external references.

Original Description

NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer._execute and numpy.f2py.crackfortran.myeval through pickle REDUCE to execute arbitrary commands during model or tokenizer artifact loading.

Database specific

{
    "cwe_ids": [
        "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-09-02T14:41:02Z",
    "nvd_published_at": "2026-08-25T12:16:28Z",
    "severity": "CRITICAL"
}

References

Affected packages

PyPI / nltk

Package

Name: nltk; View open source insights on deps.dev
Purl: pkg:pypi/nltk

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

3.10.2

Affected versions

2.*

2.0.1rc2-git

2.0b4

2.0b5

2.0b6

2.0b7

2.0b8

2.0b9

2.0.1rc1

2.0.1rc3

2.0.1rc4

2.0.1

2.0.2

2.0.3

2.0.4

2.0.5

0.*

0.8

0.9

0.9.3

0.9.4

0.9.5

0.9.6

0.9.7

0.9.8

0.9.9

3.*

3.0.0b1

3.0.0b2

3.0.0

3.0.1

3.0.2

3.0.3

3.0.4

3.0.5

3.1

3.2

3.2.1

3.2.2

3.2.3

3.2.4

3.2.5

3.3

3.4

3.4.1

3.4.2

3.4.3

3.4.4

3.4.5

3.5b1

3.5

3.6

3.6.1

3.6.2

3.6.3

3.6.4

3.6.5

3.6.6

3.6.7

3.7

3.8

3.8.1

3.9b1

3.9

3.9.1

3.9.2

3.9.3

3.9.4

3.10.0

3.10.1

3.10.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-vp9c-2pjm-8925/GHSA-vp9c-2pjm-8925.json"