nltk

GHSA-pv39-qrfq-g8gc

PyPImalware8/3/2026

Description

Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

References (2)

https://nvd.nist.gov/vuln/detail/CVE-2026-12259github_advisory https://huntr.com/bounties/659ccf6d-12d4-4d4a-84c0-078633c35a5dgithub_advisory

Details

EcosystemPyPI

Attack Typemalware

Published8/3/2026

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001