https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:21:34.874372+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-126297 CVE-2026-126297 — NLTK before 3.10.4 CPU Denial of Service via ConllCorpusReader srl_instances 2026-11-15T07:21:34.875311+00:00

Affected: nltk

NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader._get_srl_instances that allows remote attackers to exhaust CPU through nested span rescans. Attackers can supply a crafted CoNLL SRL corpus with many predicates and span columns, placing the head span last, to pin a core for minutes.