Authentication flaw

There is an Assertion in 'contextp-token.type == LEXERRIGHTBRACE || contextp-token.type == LEXERASSIGN || contextp-token.type == LEXERCOMMA' in parserparseobjectinitializer in JerryScript 2.2.0...

UBUNTU-CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which stems from a heap buffer overflow in lexerparsenumber in the js-lexer.c file. No details of the vulnerability are provided at this time...

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file as demonstrated by input that only contains the "exception" keyword.

...

AZL-35137 CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

Regular Expression Denial Of Service (ReDoS)

pygments is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string via Lexer for Values used in ADL and ODIN...

CVE-2021-27291

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service...

Updated python-pygments packages fix a security vulnerability

Infinite loop in SML lexer may lead to DoS. When the SMLLexer gets fed the string "exception" it seems to loop indefinitely rhbz1922136...

MGASA-2021-0114 Updated python-pygments packages fix a security vulnerability

Infinite loop in SML lexer may lead to DoS. When the SMLLexer gets fed the string "exception" it seems to loop indefinitely rhbz1922136...

Denial Of Service (DoS)

pygments is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop in the SML lexer through the lookahead-only regular expression pattern used...

OSV-2021-41 Heap-buffer-overflow in BaseMemStream<char const>::getChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460 Crash type: Heap-buffer-overflow READ 1 Crash state: BaseMemStream::getChar Object::streamGetChar Lexer::getChar...

PT-2020-6145 · Pygments +10 · Pygments +10

Name of the Vulnerable Software and Affected Versions: Pygments versions 1.5 to 2.7.3 Description: The issue is related to an infinite loop in the SMLLexer function of the Pygments library. This can lead to a denial of service when performing syntax highlighting of a Standard ML SML source file...

alkyne (=0.1.0), dioxus-core (=0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0 <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 =0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:RUSTSEC-2020-0136...

querylib (>=0.2.0 <=0.5.0) potentially affected by CVE-2020-36458 via lexer (=0.1.18)

lexer CARGO version =0.1.18 is affected by a known vulnerability. The following packages have a transitive dependency on lexer and may be impacted: - querylib =0.2.0, =0.5.0 Source cves: CVE-2020-36458 Source advisory: OSV:RUSTSEC-2020-0138...

OSV-2020-790 Use-of-uninitialized-value in clang::tok::isAnnotation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18444 Crash type: Use-of-uninitialized-value Crash state: clang::tok::isAnnotation clang::TokenLexer::Lex clang::Preprocessor::Lex...

llvm:clang-fuzzer: Segv on unknown address in clang::SourceManager::getFileIDLoaded

Detailed Report: https://oss-fuzz.com/testcase?key=5697366384705536 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::SourceManager::getFileIDLoaded...

Jsish Buffer Overflow Vulnerability (CNVD-2019-24378)

Jsish is a small JavaScript parser written in C with a built-in database . A buffer overflow vulnerability exists in the 'lexergetchar' function jsiLexer.c file in Jsish version 2.4.772.0477. The vulnerability stems from a networked system or product performing operations in memory without proper...