Lucene search
K

389 matches found

OSV
OSV
added 2021/03/12 12:0 a.m.35 views

DSA-4870-1 pygments - security update

Bulletin has no description...

7.5CVSS7.7AI score0.02707EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2021/03/09 4:10 p.m.84 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2.2 security and bug fix update

An update is now available for Red Hat Ansible Automation Platform 1.2.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS6.7AI score0.07605EPSS
Exploits3References5
RedHat Linux
RedHat Linux
added 2021/03/09 4:10 p.m.5 views

python-pygments: Infinite loop in SML lexer may lead to DoS

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.4AI score0.02707EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/03/09 4:10 p.m.3 views

python-pygments: ReDoS in multiple lexers

A denial of service attack was discovered against pygments. Some of the regular expressions used to tokenise source code for highlighting have exponential complexity. A specially crafted input file could cause pygments to take effectively infinite time to parse, consuming CPU resources and denyin...

7.5CVSS7.4AI score0.03832EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.2 views

Red Hat Ansible Automation 安全漏洞

Pygments is a general-purpose syntax highlighting tool for code hosting, forums, wikis, or other applications that need to beautify their source code. A denial of service vulnerability exists in Pygments versions 1.5 through 2.7.3. The vulnerability arises due to an infinite loop in the SMLLexer ...

7.5CVSS8.4AI score0.02707EPSS
Exploits0References22
UbuntuCve
UbuntuCve
added 2021/03/09 12:0 a.m.33 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02707EPSS
Exploits0References3
OSV
OSV
added 2021/03/09 12:0 a.m.0 views

UBUNTU-CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02707EPSS
Exploits0References4
OSV
OSV
added 2021/03/05 4:15 p.m.2 views

MGASA-2021-0114 Updated python-pygments packages fix a security vulnerability

Infinite loop in SML lexer may lead to DoS. When the SMLLexer gets fed the string "exception" it seems to loop indefinitely rhbz1922136...

7AI score
Exploits0References3
Mageia
Mageia
added 2021/03/05 4:15 p.m.14 views

Updated python-pygments packages fix a security vulnerability

Infinite loop in SML lexer may lead to DoS. When the SMLLexer gets fed the string "exception" it seems to loop indefinitely rhbz1922136...

1.5AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2021/03/05 10:35 a.m.47 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS3.3AI score0.02707EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/02/08 12:0 a.m.12 views

Fedora 33 : python-pygments (2021-175e686ca6)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-175e686ca6 advisory. - Backport upstream patch to fix CVE 1922137 FEDORA-2021-175e686ca6 Note that Nessus has not tested for this issue but has instead relied only on the...

5.6AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/02/08 12:0 a.m.10 views

Fedora 32 : python-pygments (2021-33abbae37b)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-33abbae37b advisory. - Security fix for PUT CVEs HERE FEDORA-2021-33abbae37b Note that Nessus has not tested for this issue but has instead relied only on the application's...

5.6AI score
Exploits0References1
OpenVAS
OpenVAS
added 2021/02/08 12:0 a.m.7 views

Fedora: Security Advisory for python-pygments (FEDORA-2021-33abbae37b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OpenVAS
OpenVAS
added 2021/02/08 12:0 a.m.8 views

Fedora: Security Advisory for python-pygments (FEDORA-2021-175e686ca6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2021/02/07 1:39 a.m.71 views

[SECURITY] Fedora 32 Update: python-pygments-2.4.2-8.fc32

Pygments is a generic syntax highlighter for general use in all kinds of software such as forum systems, wikis or other applications that need to prettify source code. Highlights are: a wide range of common languages and markup formats is supported special attention is paid to details that increa...

7.3AI score
Exploits0
Fedora
Fedora
added 2021/02/07 1:34 a.m.65 views

[SECURITY] Fedora 33 Update: python-pygments-2.6.1-5.fc33

Pygments is a generic syntax highlighter for general use in all kinds of software such as forum systems, wikis or other applications that need to prettify source code. Highlights are: a wide range of common languages and markup formats is supported special attention is paid to details that increa...

7.3AI score
Exploits0
Veracode
Veracode
added 2021/02/02 1:30 a.m.26 views

Denial Of Service (DoS)

pygments is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop in the SML lexer through the lookahead-only regular expression pattern used...

7.5CVSS3.4AI score0.02707EPSS
Exploits0References6Affected Software13
Positive Technologies
Positive Technologies
added 2021/01/03 12:0 a.m.3 views

PT-2021-3609 · Pypi +9 · Pygments +9

Name of the Vulnerable Software and Affected Versions: Pygments versions 1.1 through 2.7.3 Description: The issue is related to the use of regular expressions in the Pygments syntax highlighting program. Some of the regular expressions have exponential or cubic worst-case complexity and are...

9.8CVSS6.9AI score0.37325EPSS
Exploits22References229
Positive Technologies
Positive Technologies
added 2020/12/10 12:0 a.m.2 views

PT-2020-6145 · Pygments +10 · Pygments +10

Name of the Vulnerable Software and Affected Versions: Pygments versions 1.5 to 2.7.3 Description: The issue is related to an infinite loop in the SMLLexer function of the Pygments library. This can lead to a denial of service when performing syntax highlighting of a Standard ML SML source file...

9.8CVSS6.3AI score0.37325EPSS
Exploits22References211
Rockylinux
Rockylinux
added 2019/11/05 5:33 p.m.16 views

python36:3.6 bug fix and enhancement update

An update is available for python-pymongo, python-docutils, python-pygments, python-PyMySQL, python-docs, python36, python-virtualenv, python-distro, python-nose, python-wheel, scipy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

1.8AI score
Exploits0
Rows per page
Query Builder