EUVD-2026-66396

NLTK: ReDoS in nltk.text.Text.findall via unvalidated user-supplied regular expressions...

CVE-2026-80205

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

CVE-2026-80205 NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

CVE-2026-80205 NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

CVE-2026-80205

NLTK versions before 3.10.0 are vulnerable to a ReDoS (Regular Expression Denial of Service) in the Text.findall() and TokenSearcher.findall() methods. These methods accept user-supplied regular expressions without validation or a timeout mechanism, allowing an attacker to supply crafted patterns...

Linux Distros Unpatched Vulnerability : CVE-2026-80205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept...

PT-2026-82079

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.0 Description An issue exists where the findall functions within the Text and TokenSearcher classes accept user-supplied regular expressions without validation or timeout. This can lead to catastrophic backtracking—...