NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

Summary NLTK's Text.findall and TokenSearcher.findall methods accept user-supplied regular expressions and pass them to the Python re engine without timeout or validation, enabling catastrophic backtracking ReDoS. This issue is isolated to the nltk.text module and was resolved in a prior commit...

EUVD-2026-66396

NLTK: ReDoS in nltk.text.Text.findall via unvalidated user-supplied regular expressions...

GHSA-RRV8-H7P8-RX55 NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

Summary NLTK's Text.findall and TokenSearcher.findall methods accept user-supplied regular expressions and pass them to the Python re engine without timeout or validation, enabling catastrophic backtracking ReDoS. This issue is isolated to the nltk.text module and was resolved in a prior commit...

GHSA-2RRW-HPQM-36PV Duplicate Advisory: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rrv8-h7p8-rx55. This link is maintained to preserve external references. Original Description NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and...

Duplicate Advisory: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rrv8-h7p8-rx55. This link is maintained to preserve external references. Original Description NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and...

CVE-2026-80205

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

CVE-2026-80205 NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

CVE-2026-80205 NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

CVE-2026-80205

NLTK versions before 3.10.0 are vulnerable to a ReDoS (Regular Expression Denial of Service) in the Text.findall() and TokenSearcher.findall() methods. These methods accept user-supplied regular expressions without validation or a timeout mechanism, allowing an attacker to supply crafted patterns...

Linux Distros Unpatched Vulnerability : CVE-2026-80205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept...

CVE-2026-80205: Inefficient Regular Expression Complexity

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

PT-2026-82079

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.0 Description An issue exists where the findall functions within the Text and TokenSearcher classes accept user-supplied regular expressions without validation or timeout. This can lead to catastrophic backtracking—...