EUVD-2026-125224

NLTK: Quadratic-time CPU denial of service in ConllCorpusReader SRL instance builder via nested span rescan...

CVE-2026-126297

NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances that allows remote attackers to exhaust CPU through nested span rescans. Attackers can supply a crafted CoNLL SRL corpus with many predicates and span columns, placing the head span...

CVE-2026-126297 NLTK before 3.10.4 CPU Denial of Service via ConllCorpusReader srl_instances

NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances that allows remote attackers to exhaust CPU through nested span rescans. Attackers can supply a crafted CoNLL SRL corpus with many predicates and span columns, placing the head span...

CVE-2026-126297

The NLTK library before version 3.10.4 is vulnerable to a quadratic-time denial of service (DoS) within the ConllCorpusReader._get_srl_instances function. This flaw allows remote attackers to exhaust CPU resources by providing a specially crafted CoNLL SRL corpus containing numerous predicates an...

CVE-2026-126297: nltk: NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader._get_srl_instances…

NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader.getsrlinstances that allows remote attackers to exhaust CPU through nested span rescans. Attackers can supply a crafted CoNLL SRL corpus with many predicates and span columns, placing the head span...