fix: bump nltk to 3.10.3 for PYSEC-2026-3726 (#7162)

Force the xml extra and workspace override onto the patched release so pip-audit stops failing on the 3.10.0 symlink file-read advisory.

Author: Vidit-Ostwal

lib/crewai-tools/pyproject.toml

@@ -121,11 +121,11 @@ rag = [
 ]
 xml = [
     "unstructured[local-inference, all-docs]>=0.17.2",
-    # unstructured allows nltk>=3.9.2, but <3.10.0 has GHSA-qvv7-cg9c-w4x3
-    # (DNS-rebinding SSRF bypass), GHSA-fg7f-2386-8897 (ReDoS) and
-    # GHSA-xh95-f55m-82fw (path traversal). Declared here, not only as a uv
-    # override, so consumers installing crewai-tools[xml] get the fixed version.
-    "nltk>=3.10.0",
+    # unstructured allows nltk>=3.9.2, but <3.10.3 still has PYSEC-2026-3726
+    # (symlink file read in IPIPANCorpusReader; 3.10.0-3.10.1) plus later
+    # 3.10.2 findings. Declared here, not only as a uv override, so consumers
+    # installing crewai-tools[xml] get the fixed version.
+    "nltk>=3.10.3",
 ]
 oxylabs = [
     "oxylabs==2.0.0"

pyproject.toml

@@ -220,7 +220,10 @@ exclude-newer-package = { pypdf = "2026-08-07T00:00:00Z", msgpack = "2026-06-20T
 # nltk.pathsec.urlopen), GHSA-fg7f-2386-8897 (ReDoS in ReviewsCorpusReader), and
 # GHSA-xh95-f55m-82fw (path traversal in FramenetCorpusReader.frame); all fixed
 # in 3.10.0. 3.10.0 also clears PYSEC-2026-597, whose last affected version is
-# 3.9.4, so that ignore is no longer needed. Transitive via
+# 3.9.4, so that ignore is no longer needed. 3.10.0-3.10.1 have PYSEC-2026-3726
+# (symlink-based arbitrary file read in IPIPANCorpusReader); fixed in 3.10.2.
+# 3.10.3 also clears later 3.10.2 findings (proxy SSRF, pickle allowlist RCE,
+# JVM option injection, XML entity expansion). Transitive via
 # crewai-tools[xml] -> unstructured.
 # pydantic-settings <2.14.2 has GHSA-4xgf-cpjx-pc3j.
 # h2 <=4.4.0 has GHSA-6hr6-w5qg-qmwg (CVE-2026-71554): duplicate Host headers
@@ -257,7 +260,7 @@ override-dependencies = [
     "msgpack>=1.2.1",
     "pydantic-settings>=2.14.2",
     "setuptools>=83.0.0", # PYSEC-2026-3447
-    "nltk>=3.10.0",
+    "nltk>=3.10.3",
     "h2>=4.4.1",
     "torch>=2.13.0",
 ]