AZL-35137 CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

Regular Expression Denial Of Service (ReDoS)

pygments is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string via Lexer for Values used in ADL and ODIN...

CVE-2021-27291

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service...

MGASA-2021-0114 Updated python-pygments packages fix a security vulnerability

Infinite loop in SML lexer may lead to DoS. When the SMLLexer gets fed the string "exception" it seems to loop indefinitely rhbz1922136...

Updated python-pygments packages fix a security vulnerability

Infinite loop in SML lexer may lead to DoS. When the SMLLexer gets fed the string "exception" it seems to loop indefinitely rhbz1922136...

Denial Of Service (DoS)

pygments is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop in the SML lexer through the lookahead-only regular expression pattern used...

OSV-2021-41 Heap-buffer-overflow in BaseMemStream<char const>::getChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29460 Crash type: Heap-buffer-overflow READ 1 Crash state: BaseMemStream::getChar Object::streamGetChar Lexer::getChar...

PT-2020-6145 · Pygments +10 · Pygments +10

Name of the Vulnerable Software and Affected Versions: Pygments versions 1.5 to 2.7.3 Description: The issue is related to an infinite loop in the SMLLexer function of the Pygments library. This can lead to a denial of service when performing syntax highlighting of a Standard ML SML source file...

alkyne (=0.1.0), dioxus-core (=0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0 <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 =0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:RUSTSEC-2020-0136...

querylib (>=0.2.0 <=0.5.0) potentially affected by CVE-2020-36458 via lexer (=0.1.18)

lexer CARGO version =0.1.18 is affected by a known vulnerability. The following packages have a transitive dependency on lexer and may be impacted: - querylib =0.2.0, =0.5.0 Source cves: CVE-2020-36458 Source advisory: OSV:RUSTSEC-2020-0138...

OSV-2020-790 Use-of-uninitialized-value in clang::tok::isAnnotation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18444 Crash type: Use-of-uninitialized-value Crash state: clang::tok::isAnnotation clang::TokenLexer::Lex clang::Preprocessor::Lex...

llvm:clang-fuzzer: Segv on unknown address in clang::SourceManager::getFileIDLoaded

Detailed Report: https://oss-fuzz.com/testcase?key=5697366384705536 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::SourceManager::getFileIDLoaded...

Jsish Buffer Overflow Vulnerability (CNVD-2019-24378)

Jsish is a small JavaScript parser written in C with a built-in database . A buffer overflow vulnerability exists in the 'lexergetchar' function jsiLexer.c file in Jsish version 2.4.772.0477. The vulnerability stems from a networked system or product performing operations in memory without proper...

Fedora Update for php-phpmyadmin-sql-parser FEDORA-2019-33649e2e64

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: php-phpmyadmin-sql-parser-4.3.2-1.fc29

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

[SECURITY] Fedora 30 Update: php-phpmyadmin-sql-parser-4.3.2-1.fc30

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

[SECURITY] Fedora 30 Update: php-twig-1.38.2-2.fc30

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

[SECURITY] Fedora 28 Update: php-twig2-2.7.2-1.fc28

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...