critical7.1
CVE-2026-63310
Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
Impact
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | nltk | <= 3.9.2 | none recorded |