Résumé
Duplicate Advisory: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions
Détails de l’avis
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-w3v8-gmh9-3wv7. This link is maintained to preserve external references.
Original Description
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or timeout. An attacker who controls the tgrep pattern (e.g., via tgrep_positions() or tgrep_compile() exposed to external input) can supply a pattern that triggers catastrophic backtracking, causing indefinite CPU saturation that blocks the Python process.
Références
Vulnérabilités liées
Tout Supply chain →- MEDIUMCVE-2026-104150
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
- MEDIUMCVE-2026-107290
Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
- MEDIUMCVE-2026-105645
Ghost: Regular Expression Denial of Service in External Media Inliner
- MEDIUMCVE-2026-105646
Ghost: Regular Expression Denial of Service in Content Import
- MEDIUMCVE-2026-106454
Twisted: IMAP wildcardToRegexp() ReDoS
- HIGHCVE-2026-106104
Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server