Updated python-pygments packages fix security vulnerability

A security flaw in Pygments function AdlLexer in archetype.py stems from a regular expression having an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles. CVE-2026-4539...

Mageia: Security Advisory (MGASA-2026-0090)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0802

Updates of 'python3', 'python3-pyOpenSSL', 'libpng', 'strongswan', 'python3-requests', 'nghttp2', 'sqlite', 'glibc', 'rubygem-activesupport', 'etcd', 'python3-Pygments' packages of Photon OS have been released...

python311-Pygments-2.20.0-2.1 on GA media (moderate)

python311-Pygments-2.20.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10476-1 Rating: moderate Cross-References: CVE-2026-4539 CVSS scores: CVE-2026-4539 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

OPENSUSE-SU-2026:10476-1 python311-Pygments-2.20.0-2.1 on GA media

These are all security issues fixed in the python311-Pygments-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed...

GHSA-5239-WWWM-4PMQ vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, superset, open-webui, az, reflex, ggshield, airflow, py3-cassandra-medusa, py3.14-pygments, pypy-3.11, dask-kubernetes, neuvector-manager, kserve, pypy-3.10, datadog-agent, semgrep, kubeflow-katib, mycli, py3-pipenv, py3-pygments...

CVE-2026-4539 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, superset, open-webui, az, reflex, ggshield, airflow, py3-cassandra-medusa, py3.14-pygments, pypy-3.11, dask-kubernetes, neuvector-manager, kserve, pypy-3.10, datadog-agent, semgrep, kubeflow-katib, mycli, py3-pipenv, py3-pygments...

CVE-2026-4539 vulnerabilities

Vulnerabilities for packages: awx, mycli, datadog-agent, azure-functions-host, nvidia-nsight-compute-13.1, py3-pipenv, apache-beam-python-3.13-sdk, semgrep, tritonserver-backend-vllm-cuda-13.0, kserve-huggingfaceserver-cuda-13.3, tritonserver-backend-vllm-cuda-12.9, openstack-kolla-toolbox-2025.2...

GHSA-5239-WWWM-4PMQ vulnerabilities

Vulnerabilities for packages: awx, mycli, datadog-agent, azure-functions-host, nvidia-nsight-compute-13.1, py3-pipenv, apache-beam-python-3.13-sdk, semgrep, tritonserver-backend-vllm-cuda-13.0, kserve-huggingfaceserver-cuda-13.3, tritonserver-backend-vllm-cuda-12.9, openstack-kolla-toolbox-2025.2...

SUSE CVE-2026-4539

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released...

CVE-2026-4539

A flaw was found in pygments. A local user can exploit this vulnerability by providing specially crafted input to the AdlLexer function, which leads to inefficient regular expression processing. This can result in a Denial of Service DoS, making the application unresponsive...

a2grunnerp (>=0.1.0, <=0.1.8), aba-cli-scrapper (>=0.1.0, <=0.7.6) +2070 more potentially affected by CVE-2026-4539 via pygments (>=2.0.2, <=2.19.2)

pygments PYPI version =2.0.2, =0.1.0, =0.1.0, =0.0.2, =0.0.0, =2.0.0a0, =0.1.2, =0.0.1, =0.1.0, =0.3.4, =0.4.0, =0.9.8 and more Source cves: CVE-2026-4539 Source advisory: SNYK:PYTHON-PYGMENTS-15746419...

a2grunnerp (>=0.1.0, <=0.1.8), aba-cli-scrapper (>=0.1.0, <=0.7.6) +2070 more potentially affected by CVE-2026-4539 via pygments (>=2.0.2, <=2.19.2)

pygments PYPI version =2.0.2, =0.1.0, =0.1.0, =0.0.2, =0.0.0, =2.0.0a0, =0.1.2, =0.0.1, =0.1.0, =0.3.4, =0.4.0, =0.9.8 and more Source cves: CVE-2026-4539 Source advisory: GHSA-5239-WWWM-4PMQ...

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been release...

a2grunnerp (>=0.1.0, <=0.1.8), aba-cli-scrapper (>=0.1.0, <=0.7.6) +2070 more potentially affected by CVE-2026-4539 via pygments (>=2.0.2, <=2.19.2)

pygments PYPI version =2.0.2, =0.1.0, =0.1.0, =0.0.2, =0.0.0, =2.0.0a0, =0.1.2, =0.0.1, =0.1.0, =0.3.4, =0.4.0, =0.9.8 and more Source cves: CVE-2026-4539 Source advisory: OSV:GHSA-5239-WWWM-4PMQ...

catsup (>=0.3.8, <=0.3.11), watson-auth (>=3.0.0, <=4.0.1) +4 more potentially affected by CVE-2026-4539 via pygments (1.6.0)

pygments PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pygments and may be impacted: - catsup =0.3.8, =3.0.0, =2.3.1, =3.2.0, =1.0.0, =1.1.5 Source cves: CVE-2026-4539 Source advisory: OSV:GHSA-5239-WWWM-4PMQ...

GHSA-5239-WWWM-4PMQ Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been release...

CVE-2026-4539

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released...

CVE-2026-4539

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released...

UBUNTU-CVE-2026-4539

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released...