CBL Mariner 2.0 Security Update: python-pygments (CVE-2021-20270)

The version of python-pygments installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-20270 advisory. - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 May lead to denial of service when...

CBL Mariner 2.0 Security Update: python-pygments (CVE-2021-27291)

The version of python-pygments installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-27291 advisory. - In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on...

ROS-20240826-10

Vulnerability of pygments/lexers/smithy.py file of SmithyLexer component of syntax highlighting program Pygments is related to the use of a regular expression with inefficient computational complexity. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20240826-24

Vulnerability of pygments/lexers/smithy.py file of SmithyLexer component of syntax highlighting program Pygments is related to the use of a regular expression with inefficient computational complexity. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1

CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1. A patched version of the package is available...

CVE-2021-27291 affecting package python-pygments for versions less than 2.7.4-1

CVE-2021-27291 affecting package python-pygments for versions less than 2.7.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-11358 affecting package python-pygments for versions less than 2.7.4-1

CVE-2019-11358 affecting package python-pygments for versions less than 2.7.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1

CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1. An upgraded version of the package is available that resolves this issue...

ROS-20240723-02

Vulnerability in Pygments library's SMLLexer function is related to entering an infinite loop. Exploitation The vulnerability could allow an attacker acting remotely to cause a denial of service...

OPENSUSE-SU-2024:13208-1 python310-Pygments-2.16.1-2.1 on GA media

These are all security issues fixed in the python310-Pygments-2.16.1-2.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : python3.11-pip (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pygments: ReDoS in pygments CVE-2022-40896 Note that Nessus has not tested for this issue but has instead relied on...

RHEL 7 : python-pygments (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-pygments: Shell injection in FontManager.getnixfontpath CVE-2015-8557 Note that Nessus has not tested for th...

RHEL 6 : python-pygments (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-pygments: Shell injection in FontManager.getnixfontpath CVE-2015-8557 Note that Nessus has not tested for th...

RHEL 6 : python-pygments (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-pygments: ReDoS in multiple lexers CVE-2021-27291 Note that Nessus has not tested for this issue but has...

RHEL 7 : pygments (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pygments: ReDoS in pygments CVE-2022-40896 Note that Nessus has not tested for this issue but has instead relied on...

RHEL 6 : pygments (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pygments: ReDoS in pygments CVE-2022-40896 Note that Nessus has not tested for this issue but has instead relied on...

RHEL 7 : python-pygments (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-pygments: ReDoS in multiple lexers CVE-2021-27291 - An infinite loop in SMLLexer in Pygments...

RHEL 7 / 8 : Red Hat Ansible Automation Platform 1.2.2 (RHSA-2021:0781)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0781 advisory. Red Hat Ansible Automation Platform integrates Red Hat's automation suite consisting of Red Hat Ansible Tower, Red Hat Ansible Engine,...

pygments: ReDoS in pygments

A denial-of-service vulnerability related to regular expressions was discovered in Pygments, specifically in the file pygments/lexers/smithy.py. An attacker could exploit this flaw by sending a carefully crafted request, leading to a denial-of-service situation...

Mageia: Security Advisory (MGASA-2024-0107)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...