https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 27 Aug 2026 18:59:50 +0000 https://vulnerability.circl.lu/sighting/f8e2068f-787a-4b27-a885-07df027c5e18/export {"uuid": "f8e2068f-787a-4b27-a885-07df027c5e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117150169219152410", "content": "CVE-2026-63310 - MITM package injection flaw in NLTK downloader module. CVSS 7.1. Update NLTK to 3.9.3+ immediately. #CVE #Python #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63310/", "creation_timestamp": "2026-08-24T11:08:41.903378Z"} {"uuid": "f8e2068f-787a-4b27-a885-07df027c5e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117150169219152410", "content": "CVE-2026-63310 - MITM package injection flaw in NLTK downloader module. CVSS 7.1. Update NLTK to 3.9.3+ immediately. #CVE #Python #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63310/", "creation_timestamp": "2026-08-24T11:08:41.903378Z"} https://vulnerability.circl.lu/sighting/f8e2068f-787a-4b27-a885-07df027c5e18/export Mon, 24 Aug 2026 11:08:41 +0000 https://vulnerability.circl.lu/sighting/82e9c7d9-3333-4143-8ccc-a9a00986eb96/export {"uuid": "82e9c7d9-3333-4143-8ccc-a9a00986eb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtt634mhzm2o", "content": "CVE-2026-63310 - MITM package injection flaw in NLTK downloader module. CVSS 7.1. Update NLTK to 3.9.3+ immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-63310/", "creation_timestamp": "2026-08-24T11:08:40.751229Z"} {"uuid": "82e9c7d9-3333-4143-8ccc-a9a00986eb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtt634mhzm2o", "content": "CVE-2026-63310 - MITM package injection flaw in NLTK downloader module. CVSS 7.1. Update NLTK to 3.9.3+ immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-63310/", "creation_timestamp": "2026-08-24T11:08:40.751229Z"} https://vulnerability.circl.lu/sighting/82e9c7d9-3333-4143-8ccc-a9a00986eb96/export Mon, 24 Aug 2026 11:08:40 +0000 https://vulnerability.circl.lu/sighting/5a99530f-2f4b-4d5f-962c-0617f3f5e7bc/export {"uuid": "5a99530f-2f4b-4d5f-962c-0617f3f5e7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtpyz2zwvq2t", "content": "CVE-2026-63310\nIf you use the Natural Language Toolkit version earlier than 3.9.3, the tool does not check that downloaded language data files are genuine before unpacking them. This means an attacker who can intercept or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-23T05:00:04.358574Z"} {"uuid": "5a99530f-2f4b-4d5f-962c-0617f3f5e7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtpyz2zwvq2t", "content": "CVE-2026-63310\nIf you use the Natural Language Toolkit version earlier than 3.9.3, the tool does not check that downloaded language data files are genuine before unpacking them. This means an attacker who can intercept or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-23T05:00:04.358574Z"} https://vulnerability.circl.lu/sighting/5a99530f-2f4b-4d5f-962c-0617f3f5e7bc/export Sun, 23 Aug 2026 05:00:04 +0000 https://vulnerability.circl.lu/sighting/e6e140cd-4961-49cf-8068-1139bac6515e/export {"uuid": "e6e140cd-4961-49cf-8068-1139bac6515e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117142940889855260", "content": "CVE-2026-63310: NLTK <3.9.3 has a CRITICAL flaw where package integrity isn't checked post-download in the downloader module. Exposes users to MITM & DNS poisoning attacks. Upgrade to 3.9.3+ or avoid insecure networks. https://radar.offseq.com/threat/nltk-before-393-fails-to-verify-file-integrity-after-downloading-packages-and-before-extraction-in-the-f6492d4a6dda17c2 #OffSeq #NLTK #CVE202663310 #infosec", "creation_timestamp": "2026-08-23T04:30:27.123274Z"} {"uuid": "e6e140cd-4961-49cf-8068-1139bac6515e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117142940889855260", "content": "CVE-2026-63310: NLTK <3.9.3 has a CRITICAL flaw where package integrity isn't checked post-download in the downloader module. Exposes users to MITM & DNS poisoning attacks. Upgrade to 3.9.3+ or avoid insecure networks. https://radar.offseq.com/threat/nltk-before-393-fails-to-verify-file-integrity-after-downloading-packages-and-before-extraction-in-the-f6492d4a6dda17c2 #OffSeq #NLTK #CVE202663310 #infosec", "creation_timestamp": "2026-08-23T04:30:27.123274Z"} https://vulnerability.circl.lu/sighting/e6e140cd-4961-49cf-8068-1139bac6515e/export Sun, 23 Aug 2026 04:30:27 +0000 https://vulnerability.circl.lu/sighting/7df68f8e-c61d-4600-afe2-5bd52a824acb/export {"uuid": "7df68f8e-c61d-4600-afe2-5bd52a824acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtont55gq22e", "content": "\ud83d\udea8 CVE-2026-63310 \u2014 CVSS 9.3 CRITICAL\n\nNLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the do...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63310\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:13.792283Z"} {"uuid": "7df68f8e-c61d-4600-afe2-5bd52a824acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtont55gq22e", "content": "\ud83d\udea8 CVE-2026-63310 \u2014 CVSS 9.3 CRITICAL\n\nNLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the do...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63310\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:13.792283Z"} https://vulnerability.circl.lu/sighting/7df68f8e-c61d-4600-afe2-5bd52a824acb/export Sat, 22 Aug 2026 16:07:13 +0000 https://vulnerability.circl.lu/sighting/7037ccaa-23a4-4f8f-8e70-ba01d391a11d/export {"uuid": "7037ccaa-23a4-4f8f-8e70-ba01d391a11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtomcl6cs52p", "content": "CVE-2026-63310 - nltk\nIf you use the Natural Language Toolkit (NLTK) version earlier than 3.9.3, the software does not check that downloaded language data files are genuine before unpacking them. This means an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nltk #CVE #infosec", "creation_timestamp": "2026-08-22T15:40:04.572945Z"} {"uuid": "7037ccaa-23a4-4f8f-8e70-ba01d391a11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63310", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtomcl6cs52p", "content": "CVE-2026-63310 - nltk\nIf you use the Natural Language Toolkit (NLTK) version earlier than 3.9.3, the software does not check that downloaded language data files are genuine before unpacking them. This means an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nltk #CVE #infosec", "creation_timestamp": "2026-08-22T15:40:04.572945Z"} https://vulnerability.circl.lu/sighting/7037ccaa-23a4-4f8f-8e70-ba01d391a11d/export Sat, 22 Aug 2026 15:40:04 +0000