CVE-2021-3842— Inefficient Regular Expression Complexity in nltk/nltk
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-3842
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Inefficient Regular Expression Complexity in nltk/nltk
Source: NVD (National Vulnerability Database)
Vulnerability Description
nltk is vulnerable to Inefficient Regular Expression Complexity
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1333
Source: NVD (National Vulnerability Database)
Vulnerability Title
nltk 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nltk是一个自然语言工具包。用于支持自然语言处理的研究和开发。 nltk存在安全漏洞，该漏洞源于在处理正则表达式的过程中触发异常。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-3842
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-3842
请登录查看更多情报信息。
- https://huntr.dev/bounties/761a761e-2be2-430a-8d92-6f74ffe9866ax_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2021-3842
IV. Related Vulnerabilities
Same product: nltk/nltk
- CVE-2026-0846
Arbitrary File Read via Absolute Path Input in nltk.util.fil - CVE-2026-0848
Arbitrary Code Execution in NLTK StanfordSegmenter via Untru - CVE-2026-0847
Path Traversal in nltk/nltk - CVE-2025-14009
Zip Slip Vulnerability in nltk/nltk Leading to Remote Code E - CVE-2021-3828
Inefficient Regular Expression Complexity in nltk/nltk
Same vendor: nltk
- CVE-2026-33236
NLTK has a Downloader Path Traversal Vulnerability (AFO) - A - CVE-2026-33231
NLTK has unauthenticated remote shutdown in nltk.app.wordnet - CVE-2026-33230
nltk Vulnerable to Cross-site Scripting - CVE-2026-0846
Arbitrary File Read via Absolute Path Input in nltk.util.fil - CVE-2026-0848
Arbitrary Code Execution in NLTK StanfordSegmenter via Untru
Same weakness: CWE-1333
- CVE-2026-33079
Mistune ReDoS in LINK_TITLE_RE allows denial of service with - CVE-2026-41040
GROWI 安全漏洞 - CVE-2026-40319
Giskard has a Regular Expression Denial of Service (ReDoS) i - CVE-2026-5986
Zod jsVideoUrlParser util.js getTime redos - CVE-2026-35041
ReDoS in fast-jwt when using RegExp in allowed* leading to C
V. Comments for CVE-2021-3842
No comments yet