Compound WireTHE STANDUP8 September 2026
NLTK
XML CAN EXHAUST PROCESS MEMORY
Attacker-controlled XML can exhaust memory in NLTK
NLTK 3.10.2 and earlier can exhaust your process memory when attacker-controlled XML reaches its ACE, ElementWrapper or downloader parsers. CVE-2026-78681 uses recursive entity expansion. #software