GHSA-V8F3-6PHW-6MH9 NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan

Summary ConllCorpusReader.srlinstances builds semantic-role-labeling instances from a CoNLL corpus block. For a sentence block with P predicates and P span columns, the instance builder rescans every span column and every span within it once per predicate while searching for each predicate's head...

NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan

Summary ConllCorpusReader.srlinstances builds semantic-role-labeling instances from a CoNLL corpus block. For a sentence block with P predicates and P span columns, the instance builder rescans every span column and every span within it once per predicate while searching for each predicate's head...

Duplicate Advisory: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v8f3-6phw-6mh9. This link is maintained to preserve external references. Original Description NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances tha...