diff --git a/nltk-3.8.1.zip b/nltk-3.8.1.zip
deleted file mode 100644
index 739d771882d8bc7eab95165c8b79eaae53717136..0000000000000000000000000000000000000000
Binary files a/nltk-3.8.1.zip and /dev/null differ
diff --git a/nltk-3.9.3.tar.gz b/nltk-3.9.3.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..35b25aa9f6a561767e9814cf640ae4b92737d6ee
Binary files /dev/null and b/nltk-3.9.3.tar.gz differ
diff --git a/python-nltk.spec b/python-nltk.spec
index 253cc6b1024422417595a818536e26b90c3c5ca8..14b7e386b710d75e1c7ea2df46c15772487079e2 100644
--- a/python-nltk.spec
+++ b/python-nltk.spec
@@ -1,6 +1,6 @@
 %define anolis_release 1
 %global pypi_name nltk
-%global pypi_version 3.8.1
+%global pypi_version 3.9.3
 
 Name:           python-%{pypi_name}
 Version:        %{pypi_version}
@@ -9,7 +9,7 @@ Summary:        Natural Language Toolkit
 
 License:        Apache License, Version 2.0
 URL:            https://www.nltk.org/
-Source0:        %{pypi_source %{pypi_name} %{version} zip}
+Source0:        https://files.pythonhosted.org/packages/source/n/nltk/nltk-%{version}.tar.gz
 BuildArch:      noarch
 
 BuildRequires:  python3-devel
@@ -71,5 +71,8 @@ rm -rf %{pypi_name}.egg-info
 %{_bindir}/nltk
 
 %changelog
+* Wed Mar 11 2026 lzq11122 <lzq02303433@alibaba-inc.com> - 3.9.3-1
+- Update to  3.9.3 to fix CVE-2025-14009 
+
 * Tue Jan 23 2024 zhongling.h <zhonglingh@linux.alibaba.com> - 3.8.1-1
-- Initial package.
\ No newline at end of file
+- Initial package.