CVE-2026-63310 - NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82021 [高危] CVE-2026-82021 - Hermes Agent 0.18.2 prior to 0.19.0 contains a supply…
• CVE-2026-21810 [中危] CVE-2026-21810 - HCL BigFix Quantum Risk Analyzer is affected by a har…
• CVE-2026-65097 [高危] CVE-2026-65097 - NVIDIA NemoClaw for Linux contains a vulnerability in…
• CVE-2026-65081 [高危] CVE-2026-65081 - NVIDIA NemoClaw for Linux contains a vulnerability in…
• CVE-2026-63310 [高危] CVE-2026-63310 - NLTK before 3.9.3 fails to verify file integrity afte…