EUVD-2026-125223

NLTK: Quadratic-time CPU denial of service in Tree.chomskynormalform right-factor binarization via list.pop0...

NLTK: Quadratic-time CPU denial of service in Tree.chomsky_normal_form right-factor binarization via list.pop(0)

Summary Tree.chomskynormalform binarizes a parse tree and defaults to right factoring. For a node with N children the right-factor branch repeatedly removes the first element of a working list with list.pop0, which shifts all remaining elements each time, so binarizing one wide node costs ON^2. A...

PT-2026-147350

Summary Tree.chomsky normal form binarizes a parse tree and defaults to right factoring. For a node with N children the right-factor branch repeatedly removes the first element of a working list with list.pop0, which shifts all remaining elements each time, so binarizing one wide node costs ON^2...

Duplicate Advisory: Quadratic-time CPU denial of service in Tree.chomsky_normal_form right-factor binarization via list.pop(0)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r53h-rw34-8h97. This link is maintained to preserve external references. Original Description NLTK before 3.10.4 contains a denial of service vulnerability in Tree.chomskynormalform that allows remote attackers ...

CVE-2026-126298

NLTK before 3.10.4 contains a denial of service vulnerability in Tree.chomskynormalform that allows remote attackers to exhaust CPU through quadratic-time right-factor binarization using list.pop0. Attackers can supply a wide flat treebank tree parsed by Tree.fromstring to force tens of seconds o...

CVE-2026-126298 NLTK before 3.10.4 Quadratic CPU Denial of Service via Tree.chomsky_normal_form

NLTK before 3.10.4 contains a denial of service vulnerability in Tree.chomskynormalform that allows remote attackers to exhaust CPU through quadratic-time right-factor binarization using list.pop0. Attackers can supply a wide flat treebank tree parsed by Tree.fromstring to force tens of seconds o...

CVE-2026-126298

Versions of NLTK before 3.10.4 are vulnerable to a Denial of Service (DoS) vulnerability within the Tree.chomsky_normal_form function. The root cause is quadratic-time right-factor binarization triggered by the use of list.pop(0). A remote attacker can exploit this by providing a wide, flat treeb...

CVE-2026-126298: nltk: NLTK before 3.10.4 contains a denial of service vulnerability in Tree.chomsky_normal_form that allows remote attackers…

NLTK before 3.10.4 contains a denial of service vulnerability in Tree.chomskynormalform that allows remote attackers to exhaust CPU through quadratic-time right-factor binarization using list.pop0. Attackers can supply a wide flat treebank tree parsed by Tree.fromstring to force tens of seconds o...