CVE-2026-80205 | NLTK up to 3.9.x Regular Expression Text.findall/TokenSearcher.findall redos

A vulnerability described as problematic has been identified in NLTK up to 3.9.x. This vulnerability affects the function Text.findall/TokenSearcher.findall of the component Regular Expression. Such manipulation leads to inefficient regular expression complexity.

This vulnerability is referenced as CVE-2026-80205. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More