Regular Expression Denial of Service (ReDoS)

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the FEATURES regex in nltk/corpus/reader/reviews.py. An attacker can hang...

GHSA-GFWX-W7GR-FVH7 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, kubeflow-pipelines-visualization-server, py3-nltk, label-studio, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk...

CVE-2025-14009 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, kubeflow-pipelines-visualization-server, py3-nltk, label-studio, apache-beam-python-3.11-sdk...

CVE-2024-39705 vulnerabilities

Vulnerabilities for packages: nemo, apache-beam-python-3.11-sdk, py3-nltk...

CVE-2024-39705 vulnerabilities

Vulnerabilities for packages: py3-nltk...

Ubuntu: Security Advisory (USN-5215-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5215-1: NLTK vulnerability

Srikantha Prathi discovered that NLTK incorrectly handled specially crafted input. An attacker could use this vulnerability to cause a denial of service...

PT-2021-22014 · Pypi +3 · Nltk +3

Name of the Vulnerable Software and Affected Versions: nltk affected versions not specified Description: The nltk package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide input to the checkComparisonBlock function, specifically the read comparison...

Inefficient Regular Expression Complexity in nltk/nltk

✍️ Description The nltk package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide as an input to the readcomparisonblock function in the file "nltk/corpus/reader/comparativesents.py" may cause an application to consume an excessive amount of CPU. Belo...

CVE-2019-14751

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction...