github-featured/nltk--nltk
2
0
Fork 0
Code Issues Pull Requests Deployments Models Agent Notes Packages Projects Releases Wiki Activity

Commit Graph

  • 2559670a03 Document v3.10.1-rc1 (#3713) develop v3.10.1-rc1 Eric Ka 2026-07-27 09:48:52 +02:00
  • 3125074be6 Prevent module hijacking in inline imports (#3710) Eric Ka 2026-07-27 07:55:44 +02:00
  • e092ed52ec fix ReDoS in TweetTokenizer url and email regexes (#3701) CodingSelim 2026-07-27 08:47:54 +03:00
  • bd49f9011d allow escaped brackets in Tree.fromstring (#3694) v3.10.0-rc2 v3.10.0 CodingSelim 2026-07-05 13:15:48 +03:00
  • 27b8ad6cd5 don't crash chomsky_normal_form on terminals with siblings (#3693) CodingSelim 2026-07-05 13:13:35 +03:00
  • 52227d2afe Use os.name for Windows path handling (#3605) Md Muhtasim Munif Fahim 2026-07-05 16:08:49 +06:00
  • 06c0e2cc94 Avoid RIBES zero division on empty inputs (#3604) Md Muhtasim Munif Fahim 2026-07-05 16:06:23 +06:00
  • a167389c02 Treat missing unzip output as stale (#3607) Md Muhtasim Munif Fahim 2026-07-04 12:05:54 +06:00
  • c94c967a33 Fix EOF empty document bug in IEER corpus reader (#3648) CHENNA NAGESH 2026-07-04 11:33:02 +05:30
  • 94a259c815 Enforce restrictive primitive type checking in pathsec wrappers (#3692) Eric Ka 2026-07-04 08:01:33 +02:00
  • 5ac475d2ab fix(security): isolate Stanford Java options and clean temp files (#3683) KKfine 2026-07-04 13:59:14 +08:00
  • 986f26e71b ci(deps): bump the github-actions group with 3 updates (#3691) dependabot[bot] 2026-07-01 11:57:14 +02:00
  • f26b375303 fix(security): prevent pickle RCE in TransitionParser model loading (CWE-502) (#3631) Litesh Ghute 2026-07-01 15:16:35 +05:30
  • 8493007b3e fix(security): avoid MaltParser process-wide CWD changes (#3682) KKfine 2026-07-01 12:53:22 +08:00
  • 9e20c3eee7 Fix CWE-88 JVM argument injection in java_options (CVE-2026-12841) (#3647) samrigby64 2026-07-01 05:51:16 +01:00
  • 2f975449d2 Use OMW-2.0 with all WordNet versions (#3690) Eric Ka 2026-07-01 06:49:48 +02:00
  • 5e9130f312 fix(security): Quadratic-time DoS in NLTK GDFA (#3686) Ziyu Lin 2026-07-01 12:48:24 +08:00
  • fb76e43824 fix(security): Quadratic-time DoS in NLTK Markdown corpus reader blockquotes/lists (#3685) Ziyu Lin 2026-07-01 12:47:58 +08:00
  • 660ec0144f fix(security): Quadratic-backtracking ReDoS in NLTK AlpinoCorpusReader._normalize (#3684) Ziyu Lin 2026-07-01 12:47:27 +08:00
  • 9ea786920f fix(security): DoS in NLTK segmentation pk metric via Uncaught divide-by-zero (#3679) Ziyu Lin 2026-07-01 12:46:45 +08:00
  • 3127e19227 fix(security): DoS in NLTK NomBank instance parsing (#3678) Ziyu Lin 2026-07-01 11:44:35 +08:00
  • 0ccdcfad82 fix(security): Quadratic-memory DoS in NLTK ProjectiveDependencyParser (#3676) Ziyu Lin 2026-07-01 11:44:00 +08:00
  • 834f806b37 fix(security): Exponential beta-reduction DoS in NLTK Expression.simplify (#3675) Ziyu Lin 2026-07-01 11:43:32 +08:00
  • d8e4753931 fix(security): Quadratic ReDoS in NLTK Text.findall token search (#3674) Ziyu Lin 2026-07-01 11:43:03 +08:00
  • 9cd22715a4 fix(security): Quadratic-time DoS in NLTK Tree.un_chomsky_normal_form (#3673) Ziyu Lin 2026-07-01 11:42:33 +08:00
  • 1106a38d89 fix(security): Denial of service via quadratic complexity in NLTK segmentation metrics (#3672) Ziyu Lin 2026-07-01 11:41:56 +08:00
  • 21e5219e3d fix(security): DoS in NLTK PropBank (#3671) Ziyu Lin 2026-07-01 11:41:05 +08:00
  • 30953b77c3 fix(security): quadratic DoS in NLTK LEPOR alignment (#3670) Ziyu Lin 2026-07-01 11:40:39 +08:00
  • de9bcb2b4f fix(security): validate CoNLL / CMUdict reader lines to stop malformed-line crash (CWE-20) (#3669) Ziyu Lin 2026-07-01 11:40:04 +08:00
  • 354da5a795 fix(security): guard CHILDESCorpusReader.convert_age against malformed input (CWE-476) (#3668) Ziyu Lin 2026-07-01 11:39:27 +08:00
  • 709162f52b fix(security): bound theorem-prover proof search to stop unbounded-search DoS (CWE-400 / CWE-674) (#3667) Ziyu Lin 2026-07-01 11:38:56 +08:00
  • 0624fecd45 fix(security): make METEOR word matching linear to stop quadratic-time DoS (CVE-2026-12929) (#3666) Ziyu Lin 2026-07-01 11:38:21 +08:00
  • 70a8b0560e fix(security): bound NgramCounter distinct-ngram count to stop unbounded-memory DoS (CVE-2026-12928) (#3665) Ziyu Lin 2026-07-01 11:37:44 +08:00
  • 12f7d0bd0c fix(security): make jaro_similarity flagged-position lookup O(1) to stop cubic DoS (CVE-2026-12926) (#3664) Ziyu Lin 2026-07-01 11:36:55 +08:00
  • c31143fc0f Fix duplicated -l short option on nltk tokenize (#3342) (#3580) Jean-Baptiste Braun 2026-06-26 19:30:27 +02:00
  • 43c2280e37 Cache CRFTagger feature extraction; harden boundaries and add tests (#3573) John Winstead 2026-06-26 13:28:34 -04:00
  • 0cdab5d6ae Prevent Arbitrary File Write via XML Attribute Injection in nltk.downloader (#3628) Eric Ka 2026-06-26 13:45:24 +02:00
  • 235853c21c fix(security): bound phrase_extraction default max_phrase_length to stop cubic DoS (CVE-2026-12870) (#3657) Ziyu Lin 2026-06-26 17:47:41 +08:00
  • b6d75db532 fix(security): bound generate() derivation-expansion steps to stop unbounded-enumeration DoS (CVE-2026-12864) (#3654) Ziyu Lin 2026-06-26 17:46:52 +08:00
  • 8d9eb90902 fix(security): block IPv6 transition-embedded internal IPv4 in SSRF filter (NAT64 bypass, CWE-918) (#3644) Ziyu Lin 2026-06-26 17:43:30 +08:00
  • 7a5740af89 fix: enforce package ownership during ZIP extraction (#3625) Mohammad Favas S 2026-06-26 15:11:28 +05:30
  • 4085d53c77 fix(security): make feature-structure rename regex linear to stop quadratic ReDoS (CVE-2026-12919) (#3663) Ziyu Lin 2026-06-26 17:38:00 +08:00
  • 7130b49223 fix(security): make valuation separator regex linear to stop quadratic ReDoS (CVE-2026-12890) (#3662) Ziyu Lin 2026-06-26 17:36:42 +08:00
  • 2a42d9cabc fix(security): bound chart parse-tree extraction to stop exponential DoS (CVE-2026-12886) (#3661) Ziyu Lin 2026-06-26 17:35:37 +08:00
  • 26ddcd0e3a fix(security): bound DRT resolve_anaphora work to stop quadratic time+memory DoS (CVE-2026-12873) (#3660) Ziyu Lin 2026-06-26 17:34:01 +08:00
  • 583d63ac3d fix(security): route data.retrieve write through the pathsec sandbox (CVE-2026-12871) (#3659) Ziyu Lin 2026-06-26 17:32:57 +08:00
  • c65ca13e87 fix(security): make Cistem stemmer linear to stop quadratic-time DoS (CVE-2026-12868) (#3658) Ziyu Lin 2026-06-26 17:31:48 +08:00
  • 8527d08138 fix(security): route DependencyGraph.load through the pathsec sandbox (CVE-2026-12867) (#3656) Ziyu Lin 2026-06-26 17:29:16 +08:00
  • 3e9d537ac5 fix(security): bound everygrams default max_len to stop unbounded-allocation DoS (CVE-2026-12861) (#3655) Ziyu Lin 2026-06-26 17:28:12 +08:00
  • e7668b593f fix(security): bound Model.satisfy quantifier-nesting cost to stop combinatorial DoS (CVE-2026-12840) (#3653) Ziyu Lin 2026-06-26 17:25:57 +08:00
  • b6155c0336 fix(security): sparse ConfusionMatrix to stop quadratic-memory DoS (CVE-2026-12839) (#3652) Ziyu Lin 2026-06-26 17:24:58 +08:00
  • f455b85a51 fix(security): sparse Alignment index to stop unbounded-allocation DoS (CVE-2026-12837) (#3651) Ziyu Lin 2026-06-26 17:24:05 +08:00
  • 3da396507c fix(security): stop symlink-following deletion in downloader stale-cleanup (CWE-59) (#3643) Ziyu Lin 2026-06-26 17:21:47 +08:00
  • b05cda5e5f fix(security): cap zip decompression to prevent decompression-bomb DoS (CWE-409) (#3613) Ziyu Lin 2026-06-26 17:15:29 +08:00
  • 68b5ae3592 test: regression test for XML corpus reader symlink escape (CWE-22/CWE-59) (#3636) Ziyu Lin 2026-06-26 17:14:38 +08:00
  • 064456d02c fix(ci): resolve isort block (#3615) and restore CCG lexicon syntax (#3641) (#3677) Ziyu Lin 2026-06-25 23:47:55 +08:00
  • 04fa1a9d46 fix(security): reject CWD-relative binaries in find_binary (CWE-426) (#3642) Ziyu Lin 2026-06-25 16:28:09 +08:00
  • f4f4bb5cc8 fix(security): stop quadratic ReDoS in CCG lexicon parsing (CWE-1333) (#3641) Ziyu Lin 2026-06-25 16:26:16 +08:00
  • 00335c0f81 fix(security): route custom_distance through the pathsec sentinel (CWE-22) (#3640) Ziyu Lin 2026-06-25 16:24:57 +08:00
  • f6f786cc94 fix(security): bound super-linear n-gram scan in RIBES word_rank_alignment (CWE-407) (#3639) Ziyu Lin 2026-06-25 16:23:43 +08:00
  • c04f6d88e1 fix(security): remove quadratic scan in VADER polarity_scores (CWE-407) (#3638) Ziyu Lin 2026-06-25 16:22:08 +08:00
  • 7377ae521d fix(security): require a session token for WordNet Browser shutdown (CWE-352) (#3637) Ziyu Lin 2026-06-25 16:20:36 +08:00
  • 792d77a8d7 fix(security): validate path in GzipFileSystemPathPointer.open() (CWE-22) (#3635) Ziyu Lin 2026-06-25 16:17:34 +08:00
  • 1b308cb0f9 fix(security): close validate/extract path mismatch in pathsec Zip-Slip guard (CWE-22) (#3634) Ziyu Lin 2026-06-25 16:12:42 +08:00
  • a06066141b fix(security): bound recursion in PorterStemmer._is_consonant (CWE-674) (#3633) Ziyu Lin 2026-06-25 16:11:23 +08:00
  • c67a141987 fix(security): algorithmic-complexity DoS in DependencyGraph.contains_cycle (#3632) Ziyu Lin 2026-06-25 16:10:07 +08:00
  • 20400ae6ac fix(security): do not run the candc/boxer binary from the CWD (CWE-426) (#3623) Ziyu Lin 2026-06-25 16:08:42 +08:00
  • cffe7b139a Add RELEASE-Github.md documentation (#3627) Eric Ka 2026-06-25 10:05:12 +02:00
  • cf94145232 fix(security): route read_sents through pathsec sentinel (#3626) Eric Ka 2026-06-25 10:02:37 +02:00
  • c9c3322844 fix(security): stop exponential ReDoS in XMLCorpusView _VALID_XML_RE (CWE-1333) (#3646) Ziyu Lin 2026-06-25 16:01:15 +08:00
  • 83d25f6590 fix(security): use defusedxml in corpus readers to block XML entity-expansion DoS (CWE-776) (#3615) Ziyu Lin 2026-06-25 15:54:13 +08:00
  • fb3b65e7aa fix(security): resolve symlinks in downloader containment check (CWE-59) (#3619) Ziyu Lin 2026-06-25 15:51:01 +08:00
  • 1dea3e93ea Route _download_package() writes through pathsec.open (#3622) Eric Ka 2026-06-25 09:50:13 +02:00
  • 0cec76e51f fix(security): prevent ReDoS in chunk tag-pattern parsing (CWE-1333) (#3630) Litesh Ghute 2026-06-25 13:17:14 +05:30
  • 5acf63c26e fix(security): do not run the senna binary from the CWD (CWE-829) (#3621) Ziyu Lin 2026-06-25 15:45:25 +08:00
  • 880b6873aa fix(security): do not load weka.jar from the CWD (CWE-494) (#3620) Ziyu Lin 2026-06-25 15:44:13 +08:00
  • 2fc0bf6c29 fix(security): resolve relative ReppTokenizer dir via REPP_TOKENIZER, not the CWD (CWE-427) (#3618) Ziyu Lin 2026-06-25 15:43:29 +08:00
  • c1c1ee39b3 fix(security): bound LogicParser recursion depth to prevent uncaught RecursionError (CWE-674) (#3617) Ziyu Lin 2026-06-25 15:42:55 +08:00
  • 6a23bffc0a fix(security): resolve relative MaltParser dir via MALT_PARSER, not the CWD (CWE-426) (#3616) Ziyu Lin 2026-06-25 15:42:11 +08:00
  • b02e9ee8da fix(security): prevent ReDoS in SensevalCorpusReader _fixXML (CWE-400) (#3614) Ziyu Lin 2026-06-25 15:41:37 +08:00
  • 022fe14b80 fix(security): prevent ReDoS in TextTilingTokenizer paragraph-break regex (CWE-1333) (#3612) Ziyu Lin 2026-06-25 15:40:49 +08:00
  • 0ed4fbd6ba Fix perfect-agreement edge cases in agreement metrics (#3608) Md Muhtasim Munif Fahim 2026-06-25 13:39:19 +06:00
  • 16a32d680d Fix release workflow CI check for tagged commits (#3611) v3.10.0-rc1 Eric Kafe 2026-06-11 22:09:46 +02:00
  • d791cbdaae Prepare release metadata for 3.10.0 (#3610) Eric Kafe 2026-06-11 20:54:31 +02:00
  • be36cfe02f Check that CI succeeded on the commit a release tag points to (#3506) Eric Kafe 2026-06-11 20:14:24 +02:00
  • 8e8fcbb090 Document NLTK's new security policy (#3597) Eric Kafe 2026-06-11 19:36:21 +02:00
  • e62eb121e4 Replace unsafe exec() with importlib in utility CLI (#3609) Eric Kafe 2026-06-11 19:02:53 +02:00
  • 54228e2d9a Fix remaining post-merge issues from #3477 and #3498 (#3599) Eric Kafe 2026-06-10 11:57:43 +02:00
  • 2deaa35bce Merge pull request #3592 from ekaf/hotfix-2273 Steven Bird 2026-06-06 16:55:13 +09:30
  • a52ca96645 Merge pull request #3588 from ekaf/hotfix-3587 Steven Bird 2026-06-06 16:53:52 +09:30
  • b6e75671e8 Merge remote-tracking branch 'upstream/develop' into hotfix-3587 Eric Kafe 2026-06-06 09:14:56 +02:00
  • 042359aa80 fix(security): prevent ReDoS in ReviewsCorpusReader FEATURES regex (CWE-1333) (#3583) Ziyu Lin 2026-06-06 14:50:27 +08:00
  • 7d1389d078 fix(security): block path traversal in FramenetCorpusReader.frame() (#3581) Ziyu Lin 2026-06-06 14:48:17 +08:00
  • bf3bf32786 fix(security): block path traversal in NKJPCorpusReader (#3579) Ziyu Lin 2026-06-06 14:47:19 +08:00
  • 7df10e6efa fix(security): block URL-encoded path traversal in nltk: resource URLs (#3575) Ziyu Lin 2026-06-06 14:45:31 +08:00
  • 4a820afa58 fix(security): prevent DNS-rebinding SSRF in pathsec.urlopen (#3582) Ziyu Lin 2026-06-06 14:44:17 +08:00
  • b3592ad47f Merge remote-tracking branch 'upstream/develop' into hotfix-2273 Eric Kafe 2026-06-05 12:34:03 +02:00
  • b3e156ef61 Merge remote-tracking branch 'upstream/develop' into hotfix-3587 Eric Kafe 2026-06-05 12:25:48 +02:00
  • b792621957 Use lexical containment for downloader target paths (#3595) Eric Kafe 2026-06-05 12:24:33 +02:00
  • e02538d581 Merge remote-tracking branch 'upstream/develop' into hotfix-3587 Eric Kafe 2026-06-05 11:23:28 +02:00