NLTK versions through 3.10.3 vulnerable to CPU exhaustion; upgrade to 3.10.4
GitHub reports CVE-2026-126303 in NLTK versions 3.10.3 and earlier: a parser can consume CPU without limit and cause denial of service when processing untrusted input. Upgrade to 3.10.4 to fix the issue.