CVE-2026-33231: Nltk Lexical Path Traversal Symlinkcve-2026-33231-nltk-lexical-path-traversal-symlink
Insufficient lexical boundary check allows directory traversal via symbolic links. Checking paths using only `os.path.isabs` and substring checks for `..` fails to prevent symlink-based boundary escapes. Use `Path.resolve()` to resolve links and enforce scoped sandbox constraints.
