Lucene search
+L

459 matches found

vulnersOsv
vulnersOsv
•added 2026/07/13 2:36 p.m.•2 views

a2grunnerp (>=0.1.0, <=0.1.8), aba-cli-scrapper (>=0.1.0, <=0.7.6) +2070 more potentially affected by CVE-2026-4539 via pygments (>=2.0.2, <=2.19.2)

pygments PYPI version =2.0.2, =0.1.0, =0.1.0, =0.0.2, =0.0.0, =2.0.0a0, =0.1.2, =0.0.1, =0.1.0, =0.3.4, =0.4.0, =0.9.8 and more Source cves: CVE-2026-4539 Source advisory: OSV:PYSEC-2026-2987...

4.8CVSS5.5AI score0.00165EPSS
SaveExploits0
osv_pysec
osv_pysec
•added 2026/07/13 2:36 p.m.•24 views

PYSEC-2026-2987 Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been release...

4.8CVSS4.7AI score0.00165EPSS
SaveExploits0References11
vulnersOsv
vulnersOsv
•added 2026/07/13 2:36 p.m.•3 views

catsup (>=0.3.8, <=0.3.11), watson-auth (>=3.0.0, <=4.0.1) +4 more potentially affected by CVE-2026-4539 via pygments (1.6.0)

pygments PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pygments and may be impacted: - catsup =0.3.8, =3.0.0, =2.3.1, =3.2.0, =1.0.0, =1.1.5 Source cves: CVE-2026-4539 Source advisory: OSV:PYSEC-2026-2987...

4.8CVSS5.5AI score0.00165EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•57 views

PT-2026-59614

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been release...

4.8CVSS4.7AI score0.00165EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2026/07/10 12:00 a.m.•27 views

EulerOS 2.0 SP12 : python-pygments (EulerOS-SA-2026-2562)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

4.8CVSS4.6AI score0.00165EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/10 12:00 a.m.•28 views

EulerOS 2.0 SP12 : python-pygments (EulerOS-SA-2026-2622)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

4.8CVSS4.6AI score0.00165EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/07/01 4:16 p.m.•22 views

UBUNTU-CVE-2026-58030

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation SyntaxHighlightGeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlightGeSHi: from before 1.46.0,...

6.1CVSS6.2AI score0.0027EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/07/01 2:58 p.m.•29 views

CVE-2026-58030

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation SyntaxHighlightGeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlightGeSHi: from before 1.46.0,...

6.1CVSS6.2AI score0.0027EPSS
SaveExploits0
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•23 views

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

SummaryAn unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event.The payload executes only if a user explicitly views the affected Stacktrace in the web UI. Details When Pygments returns more lines than it was given a known upstream quirk th...

9.3CVSS6.3AI score0.00494EPSS
SaveExploits1References7Affected Software1
osv_pysec
osv_pysec
•added 2026/06/29 11:50 a.m.•29 views

PYSEC-2026-301 Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

Summary An unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. Details When Pygments returns more lines than it was given a known upstream quirk...

9.3CVSS6.2AI score0.00494EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•34 views

PT-2026-53396

Summary An unauthenticated attacker who can submit events to a Bugsink project can store arbitrary JavaScript in an event. The payload executes only if a user explicitly views the affected Stacktrace in the web UI. Details When Pygments returns more lines than it was given a known upstream quirk...

9.3CVSS6.3AI score0.00494EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2026/06/27 12:00 a.m.•25 views

EulerOS 2.0 SP15 : python-pygments (EulerOS-SA-2026-2464)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

4.8CVSS4.6AI score0.00165EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/27 12:00 a.m.•22 views

EulerOS 2.0 SP15 : python-pygments (EulerOS-SA-2026-2505)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

4.8CVSS4.6AI score0.00165EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/06/17 3:28 p.m.•23 views

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-34483 DESCRIPTION: Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat. This issue affects Apache...

7.5CVSS7.4AI score0.06561EPSS
SaveExploits9Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/06/14 12:00 a.m.•24 views

openSUSE 16 Security Update : python-Pygments (openSUSE-SU-2026:20931-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20931-1 advisory. This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer...

4.8CVSS5.6AI score0.00165EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2026/06/12 12:00 a.m.•18 views

Security update for python-Pygments (low)

openSUSE security update: security update for python-pygments ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20931-1 Rating: low References: bsc1260796 Cross-References: CVE-2026-4539 CVSS scores: CVE-2026-4539 SUSE : 3.3...

3.3CVSS5.6AI score0.00165EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/06/10 12:00 a.m.•26 views

EulerOS 2.0 SP13 : python-pygments (EulerOS-SA-2026-2312)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

4.8CVSS4.6AI score0.00165EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/10 12:00 a.m.•24 views

EulerOS 2.0 SP13 : python-pygments (EulerOS-SA-2026-2355)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

4.8CVSS4.6AI score0.00165EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2026/06/09 10:37 p.m.•48 views

OPENSUSE-SU-2026:20931-1 Security update for python-Pygments

This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer bsc1260796...

4.8CVSS5.6AI score0.00165EPSS
SaveExploits0References2
osv_suse
osv_suse
•added 2026/06/09 10:37 p.m.•17 views

SUSE-SU-2026:22058-1 Security update for python-Pygments

This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer bsc1260796...

4.8CVSS5.6AI score0.00165EPSS
SaveExploits0References3
Rows per page
Query Builder