CVE-2026-80205

creationtimestamp| type| source ---|---|--- 2026-09-02 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujqixbp4z2c 2026-09-08 22:36:05+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-rrv8-h7p8-rx55...

DEBIAN-CVE-2026-80205

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...