What is GHSA-7r4r-6ppg-7ff8?

GHSA-7r4r-6ppg-7ff8 is a security advisory published by GitHub Security Advisories with High severity. Duplicate Advisory: Symlink escape in YCOECorpusReader lets a psd/pos directory symlink read files outside the corpus root within the data sandbox

Why does GHSA-7r4r-6ppg-7ff8 name no CVE ID?

As we last read it, GitHub Security Advisories's advisory lists no CVE ID. A vendor can publish an advisory before a CVE record exists for the flaw, and some advisories never get one. CVE IDs are assigned by CVE Numbering Authorities, not by NVD, and we have not measured when, or whether, a CVE record follows.

What is the CVSS v3 score of GHSA-7r4r-6ppg-7ff8?

GHSA-7r4r-6ppg-7ff8 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-7r4r-6ppg-7ff8?

GHSA-7r4r-6ppg-7ff8 affects 1 product, including: pip/nltk:\u003c 3.10.4.

⚠ Withdrawn by GitHub Security Advisories

Withdrawn: November 13, 2026

GHSA-7r4r-6ppg-7ff8HighCVSS 7.5No CVE ID named

Duplicate Advisory: Symlink escape in YCOECorpusReader lets a psd/pos directory symlink read files outside the corpus root within the data sandbox

Vendor

GitHub Security Advisories

Published

November 13, 2026

Last Modified

November 13, 2026

📋 Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-qg35-44qx-7vrr. This link is maintained to preserve external references.

Original Description

NLTK from 3.10.0 before 3.10.4 contains a symlink escape vulnerability in YCOECorpusReader that allows attackers to read files outside the corpus root by planting psd or pos directory symlinks. Attackers controlling a YCOE corpus can make parsed_sents() and tagged_words() return file content from other corpora or temporary files within the NLTK data sandbox.

🎯 Affected products1

pip/nltk:< 3.10.4

🔗 References (4)

https://github.com/nltk/nltk/security/advisories/GHSA-qg35-44qx-7vrr
https://nvd.nist.gov/vuln/detail/CVE-2026-126304
https://www.vulncheck.com/advisories/nltk-3.10.0-before-3.10.4-symlink-escape-in-ycoecorpusreader
https://github.com/advisories/GHSA-7r4r-6ppg-7ff8