Bump NLTK to version 3.9.1 to fix CVE-2024-39705.

requirements.txt

@@ -1,6 +1,6 @@
 pymongo~=4.7.2
 requests~=2.32.2
-nltk~=3.8.2
+nltk~=3.9.1
 rapidfuzz~=3.9.3
 dnspython>=2.6.1 # not directly required, pinned by Snyk to avoid a vulnerability
 zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability

vaultlib/config.py

@@ -37,8 +37,8 @@ def __init__(self, config_path: str = "config.json") -> None:
         self.conn_retry_delay_mult: int = 3
         # Number of threads used to fetch API data
         self.fetch_threads: int = 3
-        # NLTK "Punkt" Pre-trained model URL
-        self.punkt_url: str = "punkt"
+        # NLTK "Punkt Tab" Pre-trained model URL
+        self.punkt_url: str = "punkt_tab"
 
         # All Config values from config.json are converted from camelCase to snake_case
         # overrides instance variable if exists