From c6907ab16bf73a121a88e44b465b60772373ffe2 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Sat, 1 Aug 2026 18:19:17 +0200 Subject: [PATCH] Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode --- docs/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/requirements.txt b/docs/requirements.txt index f619a7f..b9713ea 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -14,7 +14,7 @@ Markdown==3.10.2 MarkupSafe==3.0.2 mkdocs==1.6.1 more-itertools==11.0.2 -nltk==3.9.4 +nltk==3.10.1 packaging==24.1 pluggy==1.6.0 py==1.11.0