~ / search / GHSA-rqjh-jp2r-59cj

GHSA-rqjh-jp2r-59cj

NLTK Vulnerable to REDoS

Source: GitHub Advisory Database (reviewed) High CVE-2021-3842

Packages

EcosystemPackageAffectedFixed in
PyPI nltk < 3.6.6 3.6.6

Details

As written in the advisory (Markdown source, shown as plain text).

NLTK is vulnerable to REDoS in some RegexpTaggers used in the functions `get_pos_tagger` and `malt_regex_tagger`.

References

External links from the advisory. They lead to third-party sites.