Lucene search

K
osvGoogleOSV:GHSA-2WW3-FXVQ-293J
HistorySep 29, 2021 - 5:14 p.m.

NLTK Vulnerable to REDoS

2021-09-2917:14:53
Google
osv.dev
9

0.001 Low

EPSS

Percentile

45.8%

The nltk package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide as an input to the _read_comparison_block() function in the file nltk/corpus/reader/comparative_sents.py may cause an application to consume an excessive amount of CPU.

Rows per page:
1-10 of 521