CVE-2026-63310
En bref
- Source
- NVD
- État
- REJECTED
- Publiée
- Mise à jour
- Attribuée par
- VulnCheck
- Statut NVD
- Rejected
Rechercher sur…
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Avis
- GHSA-5wp5-5229-5g6q — NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
- GHSA-gf32-cmjh-8m9v — Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
- PYSEC-2026-3729 — NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-mid
- PYSEC-2026-4318 — In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforci
Références européennes
- GCVE · GCVE-0-2026-63310
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |