๐Ÿ” CVE Alert

CVE-2024-39705

CRITICAL 9.8
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.

Vendor n/a
Product n/a
Published Jun 27, 2024
Last Updated Sep 15, 2024
Stay Ahead of the Next One

Get instant alerts for n/a n/a

Be the first to know when new critical vulnerabilities affecting n/a n/a are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

n/a / n/a
n/a

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
github.com: https://github.com/nltk/nltk/issues/3266 github.com: https://github.com/nltk/nltk/issues/2522 vicarius.io: https://www.vicarius.io/vsociety/posts/rce-in-python-nltk-cve-2024-39705-39706