[Git][security-tracker-team/security-tracker][master] new nltk issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
627ac8ce by Moritz Muehlenhoff at 2026-10-14T14:35:58+02:00
new nltk issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4272,7 +4272,10 @@ CVE-2026-109958 (EspoCRM 4.0.0 before 10.0.7 contains an improper access control
 CVE-2026-109957 (EspoCRM before 10.0.7 contains an insecure direct object reference vul ...)
 	NOT-FOR-US: EspoCRM
 CVE-2026-109956 (NLTK through 3.10.3 contains a path traversal vulnerability in WekaCla ...)
-	TODO: check
+	- nltk <unfixed>
+	NOTE: https://github.com/nltk/nltk/security/advisories/GHSA-j456-xh4h-cpf2
+	NOTE: https://github.com/nltk/nltk/pull/3863
+	NOTE: https://github.com/nltk/nltk/commit/6a17606293fe9d3ea1006f99dd3fed2e2b25d519
 CVE-2026-109955 (Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerabi ...)
 	NOT-FOR-US: Hono
 CVE-2026-109954 (Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 share ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/627ac8ced7112f25d6cf46c3b9309bbd7e26b49f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/627ac8ced7112f25d6cf46c3b9309bbd7e26b49f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/6c235002/attachment-0001.htm>