Lucene search
+L

419 matches found

Veracode
Veracode
•added 2023/07/21 3:32 p.m.•33 views

Regular Expression Denial Of Service (ReDoS)

pygments is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in smithy.p due to the usage of regular expression with inefficient complexity used in the SqlJinjaLexer class which can cause catastrophic backtracking...

5.5CVSS6.8AI score0.00519EPSS
SaveExploits1References10Affected Software1
SUSE CVE
SUSE CVE
•added 2023/07/21 2:25 a.m.•8 views

SUSE CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS8.4AI score0.00519EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2023/07/20 12:00 a.m.•38 views

Amazon Linux 2 : python3-pygments (ALAS-2023-2117)

The version of python3-pygments installed on the remote host is prior to 2.2.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2117 advisory. In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some...

7.5CVSS7.4AI score0.03906EPSS
SaveExploits1References4
OSV
OSV
•added 2023/07/19 3:30 p.m.•91 views

GHSA-MRWQ-X4V8-FH7P Pygments vulnerable to ReDoS

A ReDoS issue was discovered in pygments/lexers/smithy.py in Pygments until 2.15.0 via SmithyLexer...

6.8CVSS5.6AI score0.00519EPSS
SaveExploits1References11
Github Security Blog
Github Security Blog
•added 2023/07/19 3:30 p.m.•56 views

Pygments vulnerable to ReDoS

A ReDoS issue was discovered in pygments/lexers/smithy.py in Pygments until 2.15.0 via SmithyLexer...

5.5CVSS6.5AI score0.00519EPSS
SaveExploits1References11Affected Software1
NVD
NVD
•added 2023/07/19 3:15 p.m.•32 views

CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS5.6AI score0.00519EPSS
SaveExploits1References7
OSV
OSV
•added 2023/07/19 3:15 p.m.•17 views

AZL-27502 CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
SaveExploits1References1
OSV
OSV
•added 2023/07/19 3:15 p.m.•17 views

AZL-35139 CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.2AI score0.00519EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/07/19 3:15 p.m.•12 views

CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.3AI score0.00519EPSS
SaveExploits1References8
OSV
OSV
•added 2023/07/19 3:15 p.m.•7 views

DEBIAN-CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.1AI score0.00519EPSS
SaveExploits1References1
Prion
Prion
•added 2023/07/19 3:15 p.m.•32 views

Authentication flaw

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

1.9CVSS5.6AI score0.00519EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2023/07/19 3:15 p.m.•40 views

CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
SaveExploits1References5
OSV
OSV
•added 2023/07/19 3:15 p.m.•26 views

PYSEC-2023-117

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
SaveExploits1References4
OSV
OSV
•added 2023/07/19 3:15 p.m.•15 views

UBUNTU-CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.4AI score0.00519EPSS
SaveExploits1References6
PyPA
PyPA
•added 2023/07/19 3:15 p.m.•14 views

PYSEC-2023-117

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS7AI score0.00519EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/19 12:00 a.m.•13 views

CVE-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

7.2AI score0.00519EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/07/19 12:00 a.m.•32 views

Matthäus G. Chajdas pygments 代码问题漏洞

Matthäus G. Chajdas pygments is a Matthäus G. Chajdas open source application. It provides generic syntax highlighting tool functionality. A security vulnerability exists in pygments 2.15.0 and earlier versions, which stems from a regular expression denial of service ReDoS vulnerability in...

5.5CVSS6.2AI score0.00519EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2023/07/19 12:00 a.m.•8 views

PT-2023-8449

Name of the Vulnerable Software and Affected Versions Pygments versions prior to 2.15.0 Description A ReDoS issue was discovered in pygments/lexers/smithy.py via SmithyLexer. The issue is related to the use of a regular expression with inefficient computational complexity. Exploitation of the iss...

6.8CVSS6.4AI score0.00519EPSS
SaveExploits1References50
Amazon
Amazon
•added 2023/07/19 12:00 a.m.•71 views

Medium: python3-pygments

Issue Overview: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a...

7.5CVSS7.6AI score0.03906EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/19 12:00 a.m.•4 views

CVE-2022-40896: Unrestricted Upload of File with Dangerous Type

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...

5.5CVSS6.1AI score0.00519EPSS
SaveExploits1References2
Rows per page
Query Builder