{"vulnerability": "CVE-2026-12259", "sightings": [{"uuid": "196ec98c-7d3f-4fd1-a8c7-bbe91ce70e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12259", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-5wp5-5229-5g6q", "content": "", "creation_timestamp": "2026-09-08T16:35:07.877530Z"}, {"uuid": "55603946-eb8e-44a4-b47e-e2d306e5493d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzugs7i6b24", "content": "CVE-2026-12259 - nltk\nA bug in nltk version 3.9.4 can allow attackers to modify packages being downloaded from the internet. This could lead to malicious data being trusted by users or applications\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nltk #canonical #Debian14 #CVE #infosec", "creation_timestamp": "2026-09-08T20:30:04.662060Z"}]}