PyPI/nltk CVE-2021-3828: high 7.5, EPSS 1.59%

NLTK Vulnerable to REDoS

Action: Upgrade nltk to 3.6.4 or later.

pip install nltk==3.6.4

Affected

Fixed versions

Sources

• osv: GHSA-2ww3-fxvq-293j
• https://nvd.nist.gov/vuln/detail/CVE-2021-3828
• https://github.com/nltk/nltk/pull/2816
• https://github.com/nltk/nltk/commit/277711ab1dec729e626b27aab6fa35ea5efbd7e6
• https://github.com/advisories/GHSA-2ww3-fxvq-293j
• https://github.com/nltk/nltk
• https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2021-356.yaml
• https://huntr.dev/bounties/d19aed43-75bc-4a03-91a0-4d0bb516bc32

CVE-2021-3828 · published 2021-09-29T17:14:53Z · modified 2024-10-07T15:22:59.778054Z · JSON