10 matches found
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
Summary NLTK's Text.findall and TokenSearcher.findall methods accept user-supplied regular expressions and pass them to the Python re engine without timeout or validation, enabling catastrophic backtracking ReDoS. This issue is isolated to the nltk.text module and was resolved in a prior commit...
8.7CVSS6AI score0.00489EPSS
SaveExploits1References9Affected Software1
20