| Package | Affected versions | Patched versions |
|---|---|---|
| nltk | < 3.9 | 3.9 |
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free