Threats tagged 'brew-gptline-cve-2026-80205'

NLTK's Text.findall() and TokenSearcher.findall() methods in the nltk.text module accept user-supplied regular expressions without validation or timeout, leading to a Regular Expression Denial of Service (ReDoS) vulnerability. This allows an unauthenticated attacker to cause indefinite CPU saturation by exploiting catastrophic backtracking in the regex engine. The issue was fixed in a prior commit.