https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 07:48:33 +0000 https://db.gcve.eu/vuln/cve-2021-27291 <p>In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.</p> <p>In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.</p> https://db.gcve.eu/vuln/cve-2021-27291 https://db.gcve.eu/vuln/usn-4897-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pygments, Ubuntu:18.04:LTS: pygments, Ubuntu:20.04:LTS: pygments</p> <p>Ben Caller discovered that Pygments incorrectly handled parsing certain files. If a user or automated system were tricked into parsing a specially crafted file, a remote attacker could cause Pygments to hang or consume resources, resulting in a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pygments, Ubuntu:18.04:LTS: pygments, Ubuntu:20.04:LTS: pygments</p> <p>Ben Caller discovered that Pygments incorrectly handled parsing certain files. If a user or automated system were tricked into parsing a specially crafted file, a remote attacker could cause Pygments to hang or consume resources, resulting in a denial of service.</p> https://db.gcve.eu/vuln/usn-4897-1