Ubuntu: Security Advisory (USN-7365-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2021-43854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language...

advanced-text-processing (>=0.2.0 <=0.2.1), alibaba-suanfa (=1.0.0) +298 more potentially affected by CVE-2021-43854 via nltk (>=2.0.4 <=3.6.5)

nltk PYPI version =2.0.4, =0.2.0, =2.9.0, =1.0.0, =1.3.1, =1.6.0, =0.4.1, =0.1.0b1, =0.0.37, =0.1.2, =0.0.6, =0.1.0, =0.1.1 and more Source cves: CVE-2021-43854 Source advisory: OSV:GHSA-F8M6-H2C7-8H9X...

CVE-2021-43854

creationtimestamp| type| source ---|---|--- 2021-12-23 20:21:12+00:00| seen| https://t.me/cibsecurity/34573 2025-03-24 06:00:07+00:00| seen| https://bsky.app/profile/clayton256.bsky.social/post/3ll43cikdp625...

CVE-2021-43854

CVE-2021-43854 affects the Python package NLTK. Versions prior to 3.6.5 are vulnerable to a Regular Expression Denial of Service (ReDoS) in the affected tokenizers: PunktSentenceTokenizer, sent_tokenize, and word_tokenize. The issue arises from inefficient regex backtracking on crafted inputs, ca...