6.9
Moyenne
CVE-2026-81724 NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows…
Description
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested feature-structure input. Attackers can craft trivial payloads with nested brackets that exceed Python's recursion limit and raise an unhandled RecursionError, crashing applications that parse user-supplied feature structures or feature grammars.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| nltk 3.10 | premières → < 3.10.3 | 3.10.3 |
Références
Chronologie
- Publiée
- Dernière modification
Autres CVE de nltk
Les 36 CVE de nltk →
CVE-2026-109956
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass…
8.3
Élevée
CVE-2026-81727
NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and…
6.9
Moyenne
CVE-2026-81726
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by…
8.3
Élevée
CVE-2026-81725
NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows…
6.3
Moyenne