CVE-2026-81724 in NLTK
요약
\~에 의해 MITRE • 2026. 08. 27.
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested feature-structure input. Attackers can craft trivial payloads with nested brackets that exceed Python's recursion limit and raise an unhandled RecursionError, crashing applications that parse user-supplied feature structures or feature grammars.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.