Compound WireCOMPOUND1 September 2026
NLTK
BARE 'DOT' RESOLVED THROUGH PATH
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
NLTK 3.10.2 and earlier invoke Graphviz by the bare name dot, so resolution runs through PATH, and on Windows through the current working directory first. Anyone who can drop a file called dot where the script runs gets it executed instead of Graphviz.