CVE-2026-126304 ← All CVEs & products

Posts about CVE-2026-126304

Find posts on this blog by CVE ID and product topic.

1 post

13 products

An index of this blog’s posts. Product labels describe topics discussed; consult the original advisory for affected versions.

1 post

High Nov 14, 2026

NLTK 3.10.0–3.10.3 vulnerable to symlink-based data reads; upgrade to 3.10.4

NLTK 3.10.0–3.10.3 have CVE-2026-126304: YCOECorpusReader may read data outside the corpus root, but within the NLTK data sandbox, when handling YCOE corpora with symlinks and third-party-controlled content. Upgrade to 3.10.4.

CVE-2026-126304