Lucene search
+L

6 matches found

OSV
OSV
added 2026/09/02 2:34 p.m.7 views

GHSA-VP2X-QP44-57V7 NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

Summary XMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appending each block to a growing fragment string, then calls VALIDXMLRE.matchfragment on the full accumulated buffer every iteration. Because each iteration rescans the entire accumulated fragment, the total amount of wor...

6.3CVSS6AI score0.00222EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/09/02 2:34 p.m.10 views

NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

Summary XMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appending each block to a growing fragment string, then calls VALIDXMLRE.matchfragment on the full accumulated buffer every iteration. Because each iteration rescans the entire accumulated fragment, the total amount of wor...

6.3CVSS6AI score0.00222EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2026/08/27 5:21 p.m.11 views

CVE-2026-81723

NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView.readxmlfragment that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to cause severe CPU consumption and denial of service through affected...

6.3CVSS5.9AI score0.00222EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/27 2:51 p.m.8 views

CVE-2026-81723 NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView

NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView.readxmlfragment that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to cause severe CPU consumption and denial of service through affected...

6.3CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/27 2:51 p.m.37 views

CVE-2026-81723 NLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView

NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView.readxmlfragment that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to cause severe CPU consumption and denial of service through affected...

6.3CVSS0.00222EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.16 views

PT-2026-82618

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description A quadratic CPU exhaustion issue exists in the XMLCorpusView. read xml fragment function. This occurs because the system rescans accumulated XML fragments for every 1 KiB block read. An attacker can...

6.3CVSS5.9AI score0.00222EPSS
SaveExploits0References19
Rows per page
Query Builder