a-mailx (=0.1.0), a2grunnerp (>=0.1.0 <=0.1.8) +1635 more potentially affected by CVE-2026-4539 via pygments (>=1.6.0 <=2.1.3)

🗓️ 22 Mar 2026 06:30:15Reported by Vulners OSVType

Pygments versions 1.6.0–2.1.3 are vulnerable to CVE-2026-4539 via transitive dependencies.

Reporter	Title	Published	Views	Family All 87
ibm	Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub.	14 Jul 202611:48	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	9 Apr 202610:57	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pygments-2.19.2-py3-none-any.whl	6 May 202604:04	–	ibm
ibm	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:44	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	7 May 202613:57	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in pygments [CVE-2026-4539]	21 May 202614:46	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images	18 May 202616:50	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pygments-2.19.2-py3-none-any.whl which is vulnerable to CVE-2026-4539	1 Jun 202611:47	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub	13 Jul 202617:09	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses pygments-2.19.2-py3-none-any.whl which is vulnerable to CVE-2026-4539.	4 May 202606:57	–	ibm

30 Mar 2026 14:46Current

5.8Medium risk

Vulners AI Score5.8

CVSS 21.7

CVSS 3.13.3

CVSS 44.8

CVSS 33.3

EPSS0.00156

SSVC