Liteshghute

**Name of the Vulnerable Software and Affected Versions** NLTK versions prior to 3.10.2 **Description** A symlink-based sandbox bypass exists in the FramenetCorpusReader. This issue allows attackers to read arbitrary XML files located outside the corpus root. By placing symlinks with names that contain no path separators inside the corpus subdirectory, attackers can bypass the path validation guard. These symlinks are then resolved to files outside the intended directory when accessed through the `frame by name()`, ` lu file()`, or `doc()` methods. **Recommendations** Update NLTK to version 3.10.2 or later.

**Name of the Vulnerable Software and Affected Versions** nltk versions prior to 3.10.2 **Description** An arbitrary file read issue exists in the `IPIPANCorpusReader` methods that bypasses `nltk.pathsec` validation. An attacker can place a symlink in the corpus root directory to read arbitrary files accessible to the process by calling the `channels()`, `domains()`, `categories()`, or `fileids()` methods using the symlink filename. **Recommendations** Update nltk to version 3.10.2 or later.