NLTK fixes CPU exhaustion vulnerability in Tree.chomsky_normal_form
NLTK fixed CVE-2026-126298, a CPU denial-of-service vulnerability in Tree.chomsky_normal_form affecting versions 3.10.3 and earlier. Processing an untrusted tree can consume CPU; upgrade to version 3.10.4.