CyberRota Analysis
AI-GeneratedNLTK versions prior to 3.9.4 are vulnerable to an unbounded recursion issue in the JSONTaggedDecoder.decode_obj() function, which can be exploited by attackers through deeply nested JSON structures. This vulnerability can lead to denial of service by causing the Python process to crash due to an unhandled RecursionError. Organizations using affected versions of NLTK should prioritize updates to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionError that crashes the Python process.
Related CVEs
Other vulnerabilities affecting the same vendor(s)