CVE-2026-12061

"ReviewsCorpusReader" extracts feature annotations of the form label followed by a bracketed signed digit e.g. a label then "+2" from each review line, using the module-level "FEATURES" regex. The feature-label sub-pattern is unbounded — an optional greedy run of word-plus-whitespace groups...

PT-2026-66885

Name of the Vulnerable Software and Affected Versions NLTK affected versions not specified Description ReviewsCorpusReader is susceptible to a Regular Expression Denial of Service ReDoS when extracting feature annotations. The issue occurs because the FEATURES regex uses an unbounded greedy patte...