MGASA-2023-0302 Updated python-nltk package fixes a security vulnerability

python-nltk 3.6.6 update resolves ReDoS opportunity by fixing incorrectly specified regex...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : NLTK vulnerability (USN-5215-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5215-1 advisory. Srikantha Prathi discovered that NLTK incorrectly handled specially crafted input. An attacker could use this vulnerability to cause a...

SUSE CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

SUSE CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

SUSE CVE-2021-43854

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

Ubuntu: Security Advisory (USN-5215-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2022:10040-1 Security update for python-nltk

This update for python-nltk fixes the following issues: Update to 3.7 - Improve and update the NLTK team page on nltk.org 2855, 2941 - Drop support for Python 3.6, support Python 3.10 2920 - Update to 3.6.7 - Resolve IndexError in senttokenize and wordtokenize 2922 - Update to 3.6.6 - Refactor...

Security update for python-nltk (moderate)

openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2022:10040-1 Rating: moderate References: 1146427 1191030 Cross-References: CVE-2019-14751 CVE-2021-3828 CVSS scores: CVE-2019-14751 NVD : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-3828 NVD : 7....

Mageia: Security Advisory (MGASA-2020-0160)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5215-1: NLTK vulnerability

Srikantha Prathi discovered that NLTK incorrectly handled specially crafted input. An attacker could use this vulnerability to cause a denial of service...

NLTK Vulnerable to REDoS

NLTK is vulnerable to REDoS in some RegexpTaggers used in the functions getpostagger and maltregextagger...

Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)

Impact The vulnerability is present in PunktSentenceTokenizer, senttokenize and wordtokenize. Any users of this class, or these two functions, are vulnerable to a Regular Expression Denial of Service ReDoS attack. In short, a specifically crafted long input to any of these vulnerable functions wi...

Regular Expression Denial Of Service (ReDoS)

nltk is vulnerable to regular expression denial of service. The vulnerability exists due to the inefficient regex pattern used in maltregextagger function of malt.py and getpostagger function of glue.py, allowing an attacker to cause an application crash by providing malicious payload against...

DEBIAN-CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3842

CVE-2021-3842 affects the Python NLTK package; the vulnerability is an Inefficient Regular Expression Complexity (REDoS) in certain RegexpTaggers, leading to potential denial of service. Exposed components: nltk/nltk (regex processing). Public sources assign a high severity (CVSS v3.1 base 7.5; i...