CVE-2026-80206

creationtimestamp| type| source ---|---|--- 2026-09-02 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x 2026-09-08 22:36:02+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7...

DEBIAN-CVE-2026-80206

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...