CVE-2026-63310
At a glance
- Source
- NVD
- State
- REJECTED
- Published
- Updated
- Assigner
- VulnCheck
- NVD status
- Rejected
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Advisories
- GHSA-5wp5-5229-5g6q — NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
- GHSA-gf32-cmjh-8m9v — Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
- PYSEC-2026-3729 — NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-mid
- PYSEC-2026-4318 — In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforci
European references
- GCVE · GCVE-0-2026-63310
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |