Skip to content

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in … - #53

Merged
FelixTheC merged 1 commit into
mainfrom
dependabot_alert
Aug 1, 2026
Merged

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in …#53
FelixTheC merged 1 commit into
mainfrom
dependabot_alert

Conversation

@FelixTheC

@FelixTheC FelixTheC commented Aug 1, 2026

Copy link
Copy Markdown
Owner

…nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode

Are you a maintainer of this repository?

  • Yes, I am a listed maintainer of py-overload / strongtyping_pyoverload.

If you ticked the box above, please describe the change below. Otherwise, please
close this PR and open an issue instead — see
CONTRIBUTING.md and LICENSE.md.

Description

Was any part of this PR generated by an AI tool?

  • No, this PR is fully human-authored.
  • Yes — tool(s) used:

Checklist (maintainers only)

  • Tests added/updated and passing locally.
  • Documentation (README.md, HowTo.md, docs/) updated if behavior changed.
  • No breaking changes, or breaking changes are clearly noted.

…nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode
@FelixTheC
FelixTheC merged commit f706bf9 into main Aug 1, 2026
6 checks passed
@FelixTheC
FelixTheC deleted the dependabot_alert branch August 1, 2026 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant