Duplicate Advisory: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
Critical severity
GitHub Reviewed
Published
Aug 25, 2026
to the GitHub Advisory Database
•
Updated Sep 1, 2026
Withdrawn
This advisory was withdrawn on Sep 1, 2026
Give feedback on Dependabot alerts