459 matches found
a2grunnerp (>=0.1.0, <=0.1.8), aba-cli-scrapper (>=0.1.0, <=0.7.6) +2070 more potentially affected by CVE-2026-4539 via pygments (>=2.0.2, <=2.19.2)
pygments PYPI version =2.0.2, =0.1.0, =0.1.0, =0.0.2, =0.0.0, =2.0.0a0, =0.1.2, =0.0.1, =0.1.0, =0.3.4, =0.4.0, =0.9.8 and more Source cves: CVE-2026-4539 Source advisory: OSV:PYSEC-2026-2987...
PYSEC-2026-2987 Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching
A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been release...
catsup (>=0.3.8, <=0.3.11), watson-auth (>=3.0.0, <=4.0.1) +4 more potentially affected by CVE-2026-4539 via pygments (1.6.0)
pygments PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pygments and may be impacted: - catsup =0.3.8, =3.0.0, =2.3.1, =3.2.0, =1.0.0, =1.1.5 Source cves: CVE-2026-4539 Source advisory: OSV:PYSEC-2026-2987...
PT-2026-59614
A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been release...
EulerOS 2.0 SP12 : python-pygments (EulerOS-SA-2026-2622)
According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...
EulerOS 2.0 SP12 : python-pygments (EulerOS-SA-2026-2562)
According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...
UBUNTU-CVE-2026-58030
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation SyntaxHighlightGeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlightGeSHi: from before 1.46.0,...
CVE-2026-58030
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation SyntaxHighlightGeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlightGeSHi: from before 1.46.0,...
Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
SummaryAn unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event.The payload executes only if a user explicitly views the affected Stacktrace in the web UI. Details When Pygments returns more lines than it was given a known upstream quirk th...
PYSEC-2026-301 Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Summary An unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. Details When Pygments returns more lines than it was given a known upstream quirk...
PT-2026-53396
Summary An unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. Details When Pygments returns more lines than it was given a known upstream quirk...
EulerOS 2.0 SP15 : python-pygments (EulerOS-SA-2026-2505)
According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...
EulerOS 2.0 SP15 : python-pygments (EulerOS-SA-2026-2464)
According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl
Summary IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-34483 DESCRIPTION: Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat. This issue affects Apache...
openSUSE 16 Security Update : python-Pygments (openSUSE-SU-2026:20931-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20931-1 advisory. This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer...
Security update for python-Pygments (low)
openSUSE security update: security update for python-pygments ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20931-1 Rating: low References: bsc1260796 Cross-References: CVE-2026-4539 CVSS scores: CVE-2026-4539 SUSE : 3.3...
EulerOS 2.0 SP13 : python-pygments (EulerOS-SA-2026-2312)
According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...
EulerOS 2.0 SP13 : python-pygments (EulerOS-SA-2026-2355)
According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...
OPENSUSE-SU-2026:20931-1 Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer bsc1260796...
SUSE-SU-2026:22058-1 Security update for python-Pygments
This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer bsc1260796...