{"action":"Upgrade nltk to 3.6.4 or later.","affected":[{"fixed":"3.6.4","introduced":"0"}],"component":"nltk","cve_ids":["CVE-2021-3828"],"ecosystem":"PyPI","epss":0.01592,"exploited":false,"fixed_versions":["3.6.4"],"ghsa_id":"GHSA-2ww3-fxvq-293j","id":"tcs_01M5KETF5VCC708KYH0NNQ3D54","modified_at":"2024-10-07T15:22:59.778054Z","published_at":"2021-09-29T17:14:53Z","references":["https://osv.dev/vulnerability/GHSA-2ww3-fxvq-293j","https://nvd.nist.gov/vuln/detail/CVE-2021-3828","https://github.com/nltk/nltk/pull/2816","https://github.com/nltk/nltk/commit/277711ab1dec729e626b27aab6fa35ea5efbd7e6","https://github.com/advisories/GHSA-2ww3-fxvq-293j","https://github.com/nltk/nltk","https://github.com/pypa/advisory-database/tree/main/vulns/nltk/PYSEC-2021-356.yaml","https://huntr.dev/bounties/d19aed43-75bc-4a03-91a0-4d0bb516bc32"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2ww3-fxvq-293j","url":"https://osv.dev/vulnerability/GHSA-2ww3-fxvq-293j"}],"summary":"NLTK Vulnerable to REDoS"}