PyPI/nltk CVE-2021-3828: unknown, EPSS 1.59%

nltk is vulnerable to Inefficient Regular Expression Complexity

Action: Upgrade nltk to 3.6.4 or later.

pip install nltk==3.6.4

Affected

Fixed versions

Sources

• osv: PYSEC-2021-356
• https://huntr.dev/bounties/d19aed43-75bc-4a03-91a0-4d0bb516bc32
• https://github.com/nltk/nltk/commit/277711ab1dec729e626b27aab6fa35ea5efbd7e6
• https://github.com/advisories/GHSA-2ww3-fxvq-293j

CVE-2021-3828 · published 2021-09-27T13:15:00Z · modified 2023-11-08T04:06:27.021117Z · JSON