Threats tagged 'brew-acronym-cve-2026-66393'

The Natural Language Toolkit (NLTK) contains a vulnerability in the JSONTaggedDecoder.decode_obj() method where it recursively processes JSON objects without limiting recursion depth. This can lead to a RecursionError and crash the Python process when handling deeply nested JSON inputs. The issue affects versions prior to 2.0.0_3 and has a medium severity rating. A patch is available in version 2.0.0_3 that adds a recursion depth limit to prevent this denial of service condition.