Threats tagged 'brew-acronym-cve-2026-81725'

The Pl196xCorpusReader component in NLTK suffers from a regular-expression denial of service (ReDoS) vulnerability due to inefficient regex parsing of malformed TEI blocks with many unmatched opening tags. This causes quadratic CPU usage growth when processing attacker-controlled corpus files, leading to potential parser thread stalling. The issue affects versions 2.0.0 up to but not including 2.0.0_5 and has a CVSS score of 6.3 (medium severity). A patch is available in version 2.0.0_5 that replaces the lazy regex parser with a linear parser to mitigate the issue.