THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-63311 (MEDIUM 5.3) — NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. The _resolve_hostname() helper catches OSError and ValueError during socket.getaddrinfo() and returns an empty li

[NVD] CVE-2026-63311 (MEDIUM 5.3) — NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. The _resolve_hostname() helper catches OSError and ValueError during socket.getaddrinfo() and returns an empty li

mednvdPublished 2026-08-22

CVE-2026-63311 CVSS: 5.3 MEDIUM Published: 2026-08-22T15:16:19.233

NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. The _resolve_hostname() helper catches OSError and ValueError during socket.getaddrinfo() and returns an empty list; when DNS resolution fails, the validation loop e

Indicators of compromise

CVE-2026-63311cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-63311