Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32255
HistorySep 28, 2021 - 5:53 a.m.

Regular Expression Denial Of Service (ReDoS)

2021-09-2805:53:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

45.8%

nltk is vulnerable to regular expression denial of service. An attacker is able to crash the application by providing a malicious input through the _read_comparison_block function in comparative_sents.py.

CPENameOperatorVersion
nltkle3.6.3
nltkle3.6.3