GHSA-rf74-v2fm-23pw

Affected versions of the Natural Language Toolkit (NLTK) package are vulnerable to Denial of Service (DoS) due to unbounded recursion in the `JSONTaggedDecoder.decode_obj()` method. The `decode_obj()` method recursively processes JSON objects and lists without enforcing a maximum recursion depth, leading to a `RecursionError` when processing deeply nested JSON structures. An attacker can exploit this vulnerability by supplying a crafted JSON payload with excessive nesting, causing the Python process to crash and potentially disrupting services relying on NLTK for JSON decoding.