Threats tagged 'brew-acronym-cve-2026-62385'

NLTK version 3.9.4 contains a path traversal vulnerability in its FrameNet and NKJP corpus readers. These readers improperly construct XML file paths from untrusted or poisoned selectors, allowing parsing of XML files outside the intended corpus root directory. This flaw is fixed in version 3.10.0, which enforces path-safety checks to prevent outside-root XML parsing.