Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
added 2026/09/08 8:28 p.m.11 views

NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

Summary NLTK's Text.findall and TokenSearcher.findall methods accept user-supplied regular expressions and pass them to the Python re engine without timeout or validation, enabling catastrophic backtracking ReDoS. This issue is isolated to the nltk.text module and was resolved in a prior commit...

8.7CVSS6AI score0.00489EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder