pythonnltksecuritycveafter-work
CVE-2026-79657 after work: harden NLTK pickle loaders (defense only)
CVE-2026-79657 / GHSA-vp9c-2pjm-8925: NLTK before 3.10.3 — pickle loaders trusted whole module namespaces; loading untrusted model/tokenizer artifacts could lead to RCE. Defense: upgrade ≥3.10.3, no untrusted pickles, verified provenance. Not investment advice.