Skip to content

[GHSA-7p94-766c-hgjp] NLTK Zip Slip Vulnerability fixed version#7073

Merged
advisory-database[bot] merged 1 commit intogithub:adamlaurencik/advisory-improvement-7073from
adamlaurencik:main
Feb 25, 2026
Merged

[GHSA-7p94-766c-hgjp] NLTK Zip Slip Vulnerability fixed version#7073
advisory-database[bot] merged 1 commit intogithub:adamlaurencik/advisory-improvement-7073from
adamlaurencik:main

Conversation

@adamlaurencik
Copy link

Updates

  • Fixed version added
    Comments
    The Changelog says, the issue was fixed in 3.9.3

Copilot AI review requested due to automatic review settings February 25, 2026 12:46
@github-actions github-actions bot changed the base branch from main to adamlaurencik/advisory-improvement-7073 February 25, 2026 12:47
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates a GitHub security advisory for NLTK (Natural Language Toolkit) to include the fixed version information for CVE-2025-14009, a Zip Slip vulnerability. The PR adds the version number where the vulnerability was patched, transitioning the advisory from indicating the last affected version to specifying the fixed version.

Changes:

  • Updated version range specification from last_affected: "3.9.2" to fixed: "3.9.3" based on the NLTK ChangeLog
  • Updated the advisory's modification timestamp to reflect this change

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@advisory-database advisory-database bot merged commit 30b7600 into github:adamlaurencik/advisory-improvement-7073 Feb 25, 2026
5 of 6 checks passed
@advisory-database
Copy link
Contributor

Hi @adamlaurencik! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants