CVE-2026-126299

The NLTK library, versions prior to 3.10.4 , is susceptible to a Quadratic-Time Denial of Service vulnerability within the CCG lexicon parser fromstring function. Remote attackers can exhaust CPU resources by providing wide inputs, specifically lexicon text containing long flat bracket bodies or ...