Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
NVIDIA-NeMo
/
Gym
Public
Notifications
You must be signed in to change notification settings
Fork
333
Star
1.2k
Code
Issues
587
Pull requests
325
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
security: bump nltk to >=3.10.0 in iheval and rolemrc
- #2256
#2256
Closed
kajalj22
wants to merge 22 commits into
main
NVIDIA-NeMo/Gym:main
from
security/bump-nltk-cve-jul2026
NVIDIA-NeMo/Gym:security/bump-nltk-cve-jul2026
Copy head branch name to clipboard
Conversation
Commits
22
(22)
Checks
Files changed
Closed
security: bump nltk to >=3.10.0 in iheval and rolemrc
#2256
kajalj22
wants to merge 22 commits into
main
NVIDIA-NeMo/Gym:main
from
security/bump-nltk-cve-jul2026
NVIDIA-NeMo/Gym:security/bump-nltk-cve-jul2026
Copy head branch name to clipboard
Commits
Commits on Jul 31, 2026
security: bump nltk to >=3.10.0 in iheval and rolemrc
Show description for 46036f5
kajalj22
and
claude
committed
46036f5
View commit details
Copy full SHA for 46036f5
Browse repository at this point
Commits on Aug 3, 2026
ci: set PYTHONSAFEPATH=1 to fix nltk inisec blocking regex in server venvs
Show description for 6171a8a
kajalj22
and
claude
committed
6171a8a
View commit details
Copy full SHA for 6171a8a
Browse repository at this point
Merge branch 'main' into security/bump-nltk-cve-jul2026
kajalj22
authored
fb69762
View commit details
Copy full SHA for fb69762
Browse repository at this point
fix(iheval,rolemrc): pre-import regex to bypass nltk inisec.py block
Show description for 45df6ec
kajalj22
and
claude
committed
45df6ec
View commit details
Copy full SHA for 45df6ec
Browse repository at this point
fix(lint): remove unnecessary noqa: E402 suppression on regex imports
Show description for 9889f7b
kajalj22
and
claude
committed
9889f7b
View commit details
Copy full SHA for 9889f7b
Browse repository at this point
fix(lint): suppress F401 on intentional regex pre-import
Show description for c7df787
kajalj22
and
claude
committed
c7df787
View commit details
Copy full SHA for c7df787
Browse repository at this point
fix(lint): remove blank line flagged by ruff-format
Show description for 9526d42
kajalj22
and
claude
committed
9526d42
View commit details
Copy full SHA for 9526d42
Browse repository at this point
fix(iheval,rolemrc): pre-import defusedxml alongside regex
Show description for cb11a8e
kajalj22
and
claude
committed
cb11a8e
View commit details
Copy full SHA for cb11a8e
Browse repository at this point
fix(iheval,rolemrc): pre-import defusedxml.ElementTree submodule
Show description for f427ccd
kajalj22
and
claude
committed
f427ccd
View commit details
Copy full SHA for f427ccd
Browse repository at this point
ci: add workflow_dispatch trigger to unit-tests
Show description for 8a4a7c0
kajalj22
and
claude
committed
8a4a7c0
View commit details
Copy full SHA for 8a4a7c0
Browse repository at this point
fix(ifbench,instruction_following,toolsandbox): pre-import regex and defusedxml.ElementTree
Show description for 0f6e73a
kajalj22
and
claude
committed
0f6e73a
View commit details
Copy full SHA for 0f6e73a
Browse repository at this point
fix(ifbench,tau2): fix punkt download timing and update tau2 snapshot
Show description for 319d7a1
kajalj22
and
claude
committed
319d7a1
View commit details
Copy full SHA for 319d7a1
Browse repository at this point
ci: temporarily add workflow_dispatch to trigger full suite validation
Show description for e9956e8
kajalj22
and
claude
committed
e9956e8
View commit details
Copy full SHA for e9956e8
Browse repository at this point
ci: remove temporary workflow_dispatch trigger
Show description for b425fdc
kajalj22
and
claude
committed
b425fdc
View commit details
Copy full SHA for b425fdc
Browse repository at this point
fix(lint): sort toolsandbox pre-imports alphabetically (polars before regex)
Show description for 2e6af5b
kajalj22
and
claude
committed
2e6af5b
View commit details
Copy full SHA for 2e6af5b
Browse repository at this point
fix(tau2): compact test_data.json to avoid secrets-detector false positive
Show description for 629ecbe
kajalj22
and
claude
committed
629ecbe
View commit details
Copy full SHA for 629ecbe
Browse repository at this point
Merge branch 'main' into security/bump-nltk-cve-jul2026
kajalj22
authored
852cd5b
View commit details
Copy full SHA for 852cd5b
Browse repository at this point
revert: restore original test_data.json for tau2
Show description for c227b17
kajalj22
and
claude
committed
c227b17
View commit details
Copy full SHA for c227b17
Browse repository at this point
Merge remote-tracking branch 'origin/security/bump-nltk-cve-jul2026' into security/bump-nltk-cve-jul2026
kajalj22
committed
a3dc7e2
View commit details
Copy full SHA for a3dc7e2
Browse repository at this point
revert(tau2): restore test_data.json to exact main version
Show description for 2f3f24d
kajalj22
and
claude
committed
2f3f24d
View commit details
Copy full SHA for 2f3f24d
Browse repository at this point
ci: temporarily add workflow_dispatch to run full suite
Show description for 214d9fb
kajalj22
and
claude
committed
214d9fb
View commit details
Copy full SHA for 214d9fb
Browse repository at this point
ci: remove temporary workflow_dispatch trigger
Show description for 9217178
kajalj22
and
claude
committed
9217178
View commit details
Copy full SHA for 9217178
Browse repository at this point
You can’t perform that action at this time.
