Lucene search
K

380 matches found

RedHat Linux
RedHat Linux
added 2021/08/24 1:6 p.m.2 views

python-pygments: ReDoS in multiple lexers

A denial of service attack was discovered against pygments. Some of the regular expressions used to tokenise source code for highlighting have exponential complexity. A specially crafted input file could cause pygments to take effectively infinite time to parse, consuming CPU resources and denyin...

7.5CVSS7.4AI score0.034EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2021/08/24 1:6 p.m.4 views

python-pygments: Infinite loop in SML lexer may lead to DoS

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.4AI score0.00223EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/07/19 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for python-pygments (EulerOS-SA-2021-2228)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.034EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/07/16 12:0 a.m.26 views

EulerOS 2.0 SP5 : python-pygments (EulerOS-SA-2021-2228)

According to the version of the python-pygments package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular...

7.5CVSS7.3AI score0.034EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/07/01 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for python-pygments (EulerOS-SA-2021-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.034EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/07/01 12:0 a.m.23 views

EulerOS 2.0 SP9 : python-pygments (EulerOS-SA-2021-2065)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...

7.5CVSS7.4AI score0.034EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/07/01 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for python-pygments (EulerOS-SA-2021-2065)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.034EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/07/01 12:0 a.m.40 views

EulerOS 2.0 SP9 : python-pygments (EulerOS-SA-2021-2054)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...

7.5CVSS7.4AI score0.034EPSS
Exploits1References3
Photon
Photon
added 2021/06/16 12:0 a.m.51 views

Critical Photon OS Security Update - PHSA-2021-0047

Updates of 'linux-aws', 'linux-secure', 'python3-Pygments', 'linux-rt', 'salt3', 'linux', 'lz4' packages of Photon OS have been released...

7.5CVSS1.6AI score0.93846EPSS
Exploits13
Photon
Photon
added 2021/06/16 12:0 a.m.45 views

Critical Photon OS Security Update - PHSA-2021-4.0-0047

Updates of 'python3-Pygments', 'lz4', 'salt3', 'linux-secure', 'linux-aws', 'linux-rt', 'linux' packages of Photon OS have been released...

8.8CVSS7AI score0.00667EPSS
Exploits3
Photon
Photon
added 2021/06/16 12:0 a.m.59 views

Critical Photon OS Security Update - PHSA-2021-3.0-0253

Updates of 'zeromq', 'libsolv', 'python-Pygments' packages of Photon OS have been released...

9.8CVSS6.7AI score0.034EPSS
Exploits3
Photon
Photon
added 2021/06/15 12:0 a.m.48 views

Critical Photon OS Security Update - PHSA-2021-0253

Updates of 'zeromq', 'python-Pygments', 'libsolv' packages of Photon OS have been released...

7.5CVSS1.6AI score0.034EPSS
Exploits3
Mageia
Mageia
added 2021/06/13 9:32 p.m.66 views

Updated python-pygments packages fix a security vulnerability

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service...

7.5CVSS4.2AI score0.034EPSS
Exploits1References2
OSV
OSV
added 2021/06/13 9:32 p.m.6 views

MGASA-2021-0245 Updated python-pygments packages fix a security vulnerability

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service...

7.5CVSS7.4AI score0.034EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2021:1500-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00223EPSS
Exploits0References4
Mageia
Mageia
added 2021/05/23 1:30 a.m.51 views

Updated mediawiki packages fix security vulnerabilities

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword CVE-2021-20270. A deadlock vulnerability was found in...

7.5CVSS1.1AI score0.034EPSS
Exploits5References4
OpenVAS
OpenVAS
added 2021/05/19 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for python-pygments (EulerOS-SA-2021-1887)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.034EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/05/18 12:0 a.m.29 views

EulerOS 2.0 SP8 : python-pygments (EulerOS-SA-2021-1887)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...

7.5CVSS7.4AI score0.034EPSS
Exploits1References3
OSV
OSV
added 2021/05/06 11:2 a.m.1 views

OESA-2021-1154 python-pygments security update

Security Fixes: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a...

7.5CVSS6.7AI score0.034EPSS
Exploits1References3
Fedora
Fedora
added 2021/05/06 12:53 a.m.35 views

[SECURITY] Fedora 33 Update: python-pygments-2.6.1-6.fc33

Pygments is a generic syntax highlighter for general use in all kinds of software such as forum systems, wikis or other applications that need to prettify source code. Highlights are: a wide range of common languages and markup formats is supported special attention is paid to details that increa...

7.5CVSS7.9AI score0.034EPSS
Exploits1
Rows per page
Query Builder