GHSA-V8F3-6PHW-6MH9 NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan

Summary ConllCorpusReader.srlinstances builds semantic-role-labeling instances from a CoNLL corpus block. For a sentence block with P predicates and P span columns, the instance builder rescans every span column and every span within it once per predicate while searching for each predicate's head...

EUVD-2026-125224

NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan...

NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan

Summary ConllCorpusReader.srlinstances builds semantic-role-labeling instances from a CoNLL corpus block. For a sentence block with P predicates and P span columns, the instance builder rescans every span column and every span within it once per predicate while searching for each predicate's head...

Duplicate Advisory: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v8f3-6phw-6mh9. This link is maintained to preserve external references. Original Description NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances tha...

CVE-2026-126297

NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances that allows remote attackers to exhaust CPU through nested span rescans. Attackers can supply a crafted CoNLL SRL corpus with many predicates and span columns, placing the head span...

CVE-2026-126297 NLTK before 3.10.4 CPU Denial of Service via ConllCorpusReader srl_instances

NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances that allows remote attackers to exhaust CPU through nested span rescans. Attackers can supply a crafted CoNLL SRL corpus with many predicates and span columns, placing the head span...

CVE-2026-126297

The NLTK library before version 3.10.4 is vulnerable to a quadratic-time denial of service (DoS) within the ConllCorpusReader._get_srl_instances function. This flaw allows remote attackers to exhaust CPU resources by providing a specially crafted CoNLL SRL corpus containing numerous predicates an...

CVE-2026-126297: nltk: NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader._get_srl_instances…

NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances that allows remote attackers to exhaust CPU through nested span rescans. Attackers can supply a crafted CoNLL SRL corpus with many predicates and span columns, placing the head span...