This update for python-nltk fixes the following issues:

- CVE-2026-33230: reflected cross-site scripting issue in the `lookup_...`
  route (boo#1260066)
- CVE-2026-33231: unauthenticated remote shutdown of the local WordNet Browser
  HTTP server when it is started in its default mode (boo#1260067)
- CVE-2026-33236: Attackers can control a remote XML index server to provide
  malicious values containing path traversal sequences (boo#1260068)