Ibfavas

**Name of the Vulnerable Software and Affected Versions** NLTK versions prior to 3.10.3 **Description** A quadratic CPU exhaustion issue exists in the `XMLCorpusView. read xml fragment()` function. This occurs because the system rescans accumulated XML fragments for every 1 KiB block read. An attacker can exploit this by providing malformed XML corpus files, leading to severe CPU consumption and a denial of service through affected readers such as `BNCCorpusReader`. **Recommendations** Update NLTK to version 3.10.3 or later.