[Git][security-tracker-team/security-tracker][master] Add three new nltk issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2736c70c by Salvatore Bonaccorso at 2026-08-12T17:46:30+02:00
Add three new nltk issues

Note that the GHSA reference three differnt CVEs which got though
rejected in favour of the now used. The complete CVE enties do not exist
yet.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,12 @@
+CVE-2026-12061
+	- nltk <unfixed>
+	NOTE: https://github.com/nltk/nltk/security/advisories/GHSA-fg7f-2386-8897
+CVE-2026-12072
+	- nltk <unfixed>
+	NOTE: https://github.com/nltk/nltk/security/advisories/GHSA-6hm5-jgcp-p838
+CVE-2026-12074
+	- nltk <unfixed>
+	NOTE: https://github.com/nltk/nltk/security/advisories/GHSA-xh95-f55m-82fw
 CVE-2026-68868
 	NOT-FOR-US: Apache Airflow provider
 CVE-2026-52073 [ppp_handle_ipcp attacker-controlled IPCP length -- OOB read]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2736c70c3385ebc0fc9579959184e95f302ded4a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2736c70c3385ebc0fc9579959184e95f302ded4a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260812/ffbc8c30/attachment.htm>