THREATOPS
THREAT OPSThreat News › CVE-2026-80205 : ReDoS in NLTK Text.findall() (CVSS 8.7 High)

CVE-2026-80205 : ReDoS in NLTK Text.findall() (CVSS 8.7 High)

medoss_secPublished 2026-09-01

<p>Posted by Aditi Bhatnagar on Sep 01</p>Hello,<br /> <br /> We are reporting a high-severity vulnerability in NLTK, a leading Python<br /> natural language processing library (14,000+ GitHub stars) with over a<br /> billion downloads.<br /> <br /> CVE: CVE-2026-80205<br /> CVSS: 8.7 (High, CVSSv4) / 7.5 (High, CVSSv3.1)<br /> GHSA: <a href="https://github.com/nltk/nltk/securit

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/634