Python/nltk/3.8.1
Natural Language Toolkit
https://pypi.org/project/nltk
Apache-2.0
1 Security Vulnerabilities
ntlk unsafe deserialization vulnerability
Published date: 2024-06-28T00:33:31Z
CVE: CVE-2024-39705
Links:
- https://nvd.nist.gov/vuln/detail/CVE-2024-39705
- https://github.com/nltk/nltk/issues/2522
- https://github.com/nltk/nltk/issues/3266
- https://github.com/advisories/GHSA-cgvx-9447-vcch
- https://github.com/nltk/nltk/commit/441aecb7d33014bd08672232c6c8bb69c2ceaba2
- https://www.vicarius.io/vsociety/posts/rce-in-python-nltk-cve-2024-39705-39706
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt.
Affected versions:
["0.8", "0.9", "0.9.3", "0.9.4", "0.9.5", "0.9.6", "0.9.7", "0.9.8", "0.9.9", "2.0.1", "2.0.1rc1", "2.0.1rc2-git", "2.0.1rc3", "2.0.1rc4", "2.0.2", "2.0.3", "2.0.4", "2.0.5", "2.0b4", "2.0b5", "2.0b6", "2.0b7", "2.0b8", "2.0b9", "3.0.0", "3.0.0b1", "3.0.0b2", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.1", "3.2", "3.2.1", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.3", "3.4", "3.4.1", "3.4.2", "3.4.3", "3.4.4", "3.4.5", "3.5", "3.5b1", "3.6", "3.6.1", "3.6.2", "3.6.3", "3.6.4", "3.6.5", "3.6.6", "3.6.7", "3.7", "3.8", "3.8.1", "3.8.2", "3.9b1"]
Secure versions:
[3.9, 3.9.1]
Recommendation:
Update to version 3.9.1.
63 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 3.9.1 | Apache-2.0 | |||
| 3.9 | Apache-2.0 | |||
| 3.8.2 | Apache-2.0 | 1 | ||
| 3.8.1 | Apache-2.0 | 1 | ||
| 3.8 | Apache-2.0 | 1 | ||
| 3.7 | Apache-2.0 | 1 | 2022-02-09 - 12:40 | over 2 years |
| 3.6.7 | Apache-2.0 | 1 | 2021-12-28 - 23:28 | almost 3 years |
| 3.6.6 | Apache-2.0 | 1 | 2021-12-21 - 02:16 | almost 3 years |
| 3.6.5 | Apache-2.0 | 3 | 2021-10-11 - 03:49 | about 3 years |
| 3.6.4 | Apache-2.0 | 3 | 2021-10-01 - 01:58 | about 3 years |
| 3.6.3 | Apache-2.0 | 4 | 2021-09-20 - 06:00 | about 3 years |
| 3.6.2 | Apache-2.0 | 4 | 2021-04-20 - 07:42 | over 3 years |
| 3.6.1 | Apache-2.0 | 4 | 2021-04-07 - 21:36 | over 3 years |
| 3.6 | Apache-2.0 | 4 | 2021-04-07 - 10:49 | over 3 years |
| 3.5 | Apache-2.0 | 4 | 2020-04-12 - 23:46 | over 4 years |
| 3.4.5 | Apache-2.0 | 4 | 2019-08-20 - 10:55 | about 5 years |
| 3.4.4 | Apache-2.0 | 5 | 2019-07-04 - 11:09 | over 5 years |
| 3.4.3 | Apache-2.0 | 5 | 2019-06-06 - 17:52 | over 5 years |
| 3.4.2 | Apache-2.0 | 5 | 2019-06-06 - 04:02 | over 5 years |
| 3.4.1 | Apache-2.0 | 5 | 2019-04-17 - 10:48 | over 5 years |
| 3.4 | Apache-2.0 | 5 | 2018-11-17 - 08:04 | almost 6 years |
| 3.3 | Apache-2.0 | 5 | 2018-05-06 - 02:27 | over 6 years |
| 3.2.5 | Apache-2.0 | 5 | 2017-09-24 - 11:36 | about 7 years |
| 3.2.4 | Apache-2.0 | 5 | 2017-05-20 - 22:49 | over 7 years |
| 3.2.3 | Apache-2.0 | 5 | 2017-05-17 - 20:59 | over 7 years |
| 3.2.2 | Apache-2.0 | 5 | 2016-12-31 - 21:47 | almost 8 years |
| 3.2.1 | Apache-2.0 | 5 | 2016-04-09 - 10:06 | over 8 years |
| 3.2 | Apache-2.0 | 5 | 2016-03-03 - 01:12 | over 8 years |
| 3.1 | Apache-2.0 | 5 | 2015-10-15 - 19:51 | about 9 years |
| 3.0.5 | Apache-2.0 | 5 | 2015-09-06 - 02:51 | about 9 years |
| 3.0.4 | Apache-2.0 | 5 | 2015-07-13 - 01:39 | over 9 years |
| 3.0.3 | Apache-2.0 | 5 | 2015-06-11 - 10:59 | over 9 years |
| 3.0.2 | Apache-2.0 | 5 | 2015-03-13 - 03:43 | over 9 years |
| 3.0.1 | Apache-2.0 | 5 | 2015-01-12 - 23:11 | almost 10 years |
| 3.0.0 | Apache-2.0 | 5 | 2015-01-12 - 00:24 | almost 10 years |
| 3.0.0b2 | Apache-2.0 | 5 | 2014-08-26 - 00:56 | about 10 years |
| 3.0.0b1 | Apache-2.0 | 5 | 2014-07-11 - 13:32 | over 10 years |
| 2.0.5 | Apache-2.0 | 5 | 2015-01-12 - 22:55 | almost 10 years |
| 2.0.4 | Apache-2.0 | 5 | 2015-01-12 - 22:58 | almost 10 years |
| 2.0.3 | Apache-2.0 | 5 | 2012-09-24 - 09:34 | about 12 years |
| 2.0.2 | Apache-2.0 | 5 | 2012-07-05 - 12:08 | over 12 years |
| 2.0.1 | Apache-2.0 | 5 | 2012-05-15 - 04:29 | over 12 years |
| 2.0.1rc4 | Apache-2.0 | 5 | 2012-02-10 - 00:01 | over 12 years |
| 2.0.1rc3 | Apache-2.0 | 5 | 2012-01-07 - 06:41 | almost 13 years |
| 2.0.1rc1 | Apache-2.0 | 5 | 2011-04-11 - 08:04 | over 13 years |
| 2.0.1rc2-git | Apache-2.0 | 5 | 2011-12-01 - 04:45 | almost 13 years |
| 0.9.9 | GPL | 5 | ||
| 0.9.8 | GPL | 5 | ||
| 0.9.7 | GPL | 5 | ||
| 0.9.6 | GPL | 5 | ||
| 0.9.5 | GPL | 5 | ||
| 0.9.4 | GPL | 5 | ||
| 0.9.3 | GPL | 5 | ||
| 0.9 | GPL | 5 | ||
| 0.8 | GPL | 5 | ||
| 2.0b7 | Apache-2.0 | 5 | 2009-11-09 - 14:20 | almost 15 years |
| 2.0b6 | Apache-2.0 | 5 | 2009-09-25 - 10:31 | about 15 years |
| 2.0b8 | Apache-2.0 | 5 | 2010-03-10 - 20:30 | over 14 years |
| 2.0b4 | Apache-2.0 | 5 | 2009-07-15 - 09:32 | over 15 years |
| 2.0b5 | Apache-2.0 | 5 | 2009-07-19 - 10:20 | over 15 years |
| 2.0b9 | Apache-2.0 | 5 | 2010-08-23 - 07:46 | about 14 years |
| 3.5b1 | Apache-2.0 | 4 | 2020-03-08 - 00:48 | over 4 years |
| 3.9b1 | Apache-2.0 | 1 |