Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cv2g-m8rr-888c

Опубликовано: 22 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionError that crashes the Python process.

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionError that crashes the Python process.

EPSS

Процентиль: 29%
0.00363
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 дней назад

(NLTK versions before 3.9.4 contain an unbounded recursion vulnerabilit ...)

CVSS3: 7.5
redhat
10 дней назад

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionError that crashes the Python process.

CVSS3: 7.5
nvd
10 дней назад

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionError that crashes the Python process.

CVSS3: 7.5
debian
10 дней назад

NLTK versions before 3.9.4 contain an unbounded recursion vulnerabilit ...

EPSS

Процентиль: 29%
0.00363
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-674