An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-pymongo-gridfsUpgrade python3-distroUpgrade python2-attrsUpgrade python2-pysocksUpgrade python3-wheelUpgrade python2-pymongo-gridfsUpgrade resource-agentsUpgrade python3-docutilsUpgrade python2-rpm-macrosUpgrade python36-develUpgrade python2-pytzUpgrade python2-setuptools-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python2-psycopg2-debugUpgrade python2-sixUpgrade python2-wheelUpgrade python2-docutilsUpgrade python2-pytestUpgrade python3-noseUpgrade python36-debugUpgrade python-nose-docsUpgrade python3-PyMySQLUpgrade python2-coverageUpgrade python2-ipaddressUpgrade python-psycopg2-docUpgrade python2-mockUpgrade python2-numpy-f2pyUpgrade python2-docs-infoUpgrade python36-rpm-macrosUpgrade python2-numpyUpgrade python2-backportsUpgrade python2-dnsUpgrade python-virtualenv-docUpgrade python2-bsonUpgrade python2-pyUpgrade python2-CythonUpgrade python3-virtualenvUpgrade python2-docsUpgrade python2-pytest-mockUpgrade python2-chardetUpgrade python2-pyyamlUpgrade python2-psycopg2-testsUpgrade python2-jinja2Upgrade python2-PyMySQLUpgrade python2-setuptoolsUpgrade python2-pymongoUpgrade python3-pygmentsUpgrade python2-babelUpgrade python2-virtualenvUpgrade python2-requestsUpgrade resource-agents-aliyunUpgrade python2-idnaUpgrade python2-markupsafeUpgrade resource-agents-pafUpgrade python2-setuptools_scmUpgrade python2-funcsigsUpgrade python3-sqlalchemyUpgrade python2-pygmentsUpgrade resource-agents-gcpUpgrade python3-bsonUpgrade python-pymongo-docUpgrade python2-noseUpgrade python2-scipyUpgrade python2-pluggyUpgrade python2-wheel-wheelUpgrade python2-numpy-docUpgrade python2-urllib3Upgrade python36Upgrade python3-pymongoUpgrade babelUpgrade python-sqlalchemy-docUpgrade python3-wheel-wheelUpgrade python3-docsUpgrade python2-sqlalchemyUpgrade python2-psycopg2Upgrade python3-scipy | May 4, 2022 | Mar 23, 2021 |
| Alpine Linux | — | Upgrade py3-pygments | Aug 22, 2024 | Mar 23, 2021 |
| Centos_linux | — | Upgrade python2-psycopg2-debuginfoUpgrade python2-funcsigsUpgrade python-coverage-debugsourceUpgrade python2-debugsourceUpgrade python2-CythonUpgrade python2-mockUpgrade python2-psycopg2-debugUpgrade python2-pipUpgrade resource-agents-aliyun-debuginfoUpgrade python36-debugUpgrade python2-Cython-debuginfoUpgrade python2-numpyUpgrade python2-pysocksUpgrade python2-docs-infoUpgrade python2-pygmentsUpgrade python2-debuginfoUpgrade python2-bsonUpgrade python2-requestsUpgrade python3-wheelUpgrade python3-scipy-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2Upgrade python2-jinja2Upgrade python2-pytestUpgrade python2-develUpgrade python2-testUpgrade python2-coverage-debuginfoUpgrade python2-sqlalchemyUpgrade python2-backportsUpgrade python-virtualenv-docUpgrade resource-agents-gcpUpgrade python3-PyMySQLUpgrade python3-distroUpgrade python2-virtualenvUpgrade python3-virtualenvUpgrade python36-rpm-macrosUpgrade python2-wheelUpgrade python2-urllib3Upgrade python2-pip-wheelUpgrade python3-noseUpgrade PyYAML-debugsourceUpgrade python2-numpy-f2pyUpgrade python2-sixUpgrade python-pymongo-debugsourceUpgrade python2-pytzUpgrade python3-pymongoUpgrade numpy-debugsourceUpgrade python36-develUpgrade python3-pymongo-debuginfoUpgrade python36Upgrade python2-pyUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-markupsafeUpgrade python2-libsUpgrade python2-dnsUpgrade resource-agents-debugsourceUpgrade python2-attrsUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python2-ipaddressUpgrade python2-pluggyUpgrade python2-chardetUpgrade python2-coverageUpgrade python2-idnaUpgrade python3-bsonUpgrade python-psycopg2-debuginfoUpgrade python-pymongo-docUpgrade python2-noseUpgrade python-lxml-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2-testsUpgrade python2-tkinterUpgrade python2-PyMySQLUpgrade python2-scipyUpgrade python3-bson-debuginfoUpgrade python3-docsUpgrade python2-lxmlUpgrade python2-babelUpgrade python2-setuptools-wheelUpgrade python2-docsUpgrade babelUpgrade python2-pymongoUpgrade python2-pyyaml-debuginfoUpgrade python2-numpy-debuginfoUpgrade python3-pygmentsUpgrade python3-scipyUpgrade python2-setuptoolsUpgrade python2-wheel-wheelUpgrade python3-pymongo-gridfsUpgrade resource-agentsUpgrade python2-numpy-docUpgrade python-psycopg2-docUpgrade scipy-debugsourceUpgrade python2-toolsUpgrade python2-docutilsUpgrade python3-docutilsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-debugUpgrade python2-pytest-mockUpgrade python3-wheel-wheelUpgrade python2-bson-debuginfoUpgrade python2-lxml-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-rpm-macrosUpgrade Cython-debugsourceUpgrade python3-sqlalchemyUpgrade resource-agents-debuginfoUpgrade resource-agents-aliyunUpgrade python-sqlalchemy-docUpgrade python2-psycopg2Upgrade python-nose-docsUpgrade resource-agents-pafUpgrade python2-scipy-debuginfoUpgrade python2-pyyaml | Nov 10, 2021 | Mar 23, 2021 |
| Debian | — | Upgrade mediawikiUpgrade pygments | Mar 15, 2021 | Mar 15, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade py37-pygmentsUpgrade py311-pygmentsUpgrade py39-pygments-25Upgrade py38-pygments-25Upgrade py37-pygments-25Upgrade py39-pygmentsUpgrade py38-pygmentsUpgrade py310-pygmentsUpgrade py310-pygments-25Upgrade py311-pygments-25 | Sep 1, 2023 | Aug 31, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pygments | Sep 16, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-pygmentsUpgrade python2-pygments | May 18, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pygments-helpUpgrade python3-pygments | Jul 2, 2021 | Mar 23, 2021 |
| Oracle Solaris | — | Upgrade library/python/pygments-39 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-37 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-27 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 23, 2021 |
| Oracle_linux | — | Upgrade python3-distroUpgrade python2-jinja2Upgrade python2-rpm-macrosUpgrade python3-wheelUpgrade python2-numpyUpgrade python2-bsonUpgrade python2-pyUpgrade python2-pygmentsUpgrade python2-attrsUpgrade python2-pipUpgrade python2Upgrade python2-libsUpgrade python2-pytzUpgrade python3-noseUpgrade python2-virtualenvUpgrade python2-pip-wheelUpgrade python2-urllib3Upgrade python2-funcsigsUpgrade python2-wheelUpgrade python2-backportsUpgrade python3-PyMySQLUpgrade python2-backports-ssl_match_hostnameUpgrade python2-docs-infoUpgrade python36-rpm-macrosUpgrade python-virtualenv-docUpgrade python2-CythonUpgrade babelUpgrade python2-markupsafeUpgrade python2-docutilsUpgrade python2-numpy-f2pyUpgrade python36-develUpgrade python2-pysocksUpgrade python2-sixUpgrade python2-requestsUpgrade python2-psycopg2-debugUpgrade python3-pymongoUpgrade python2-mockUpgrade python2-setuptools_scmUpgrade python3-virtualenvUpgrade python2-testUpgrade python2-pytestUpgrade python2-pymongo-gridfsUpgrade python-psycopg2-docUpgrade python2-dnsUpgrade python36-debugUpgrade python3-pymongo-gridfsUpgrade python2-coverageUpgrade python2-setuptoolsUpgrade python2-chardetUpgrade python3-docsUpgrade python2-pluggyUpgrade python2-wheel-wheelUpgrade python2-pyyamlUpgrade python2-noseUpgrade python2-idnaUpgrade resource-agentsUpgrade python2-psycopg2Upgrade python2-develUpgrade python-nose-docsUpgrade python2-setuptools-wheelUpgrade python2-psycopg2-testsUpgrade python2-docsUpgrade python3-docutilsUpgrade python3-bsonUpgrade python3-wheel-wheelUpgrade python2-toolsUpgrade python3-scipyUpgrade python36Upgrade python2-PyMySQLUpgrade python2-numpy-docUpgrade python2-tkinterUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python3-sqlalchemyUpgrade python2-pymongoUpgrade python2-lxmlUpgrade python2-sqlalchemyUpgrade python2-pytest-mockUpgrade python3-pygmentsUpgrade python-sqlalchemy-docUpgrade python2-babelUpgrade python2-debugUpgrade python-pymongo-doc | Nov 19, 2021 | Dec 10, 2020 |
| Redhat_linux | — | Upgrade python2-toolsUpgrade python2-testNo solution existsUpgrade python2-pygmentsUpgrade python2-numpy-debuginfoUpgrade python2-debugsourceUpgrade python3-bson-debuginfoUpgrade python2-pytest-mockUpgrade python2-pysocksUpgrade python2-CythonUpgrade python2-PyMySQLUpgrade python3-PyMySQLUpgrade python2-mockUpgrade python2-rpm-macrosUpgrade python-pymongo-docUpgrade python2-psycopg2-debugUpgrade python3-scipy-debuginfoUpgrade python2-markupsafeUpgrade python2-funcsigsUpgrade resource-agents-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade python3-distroUpgrade python2-docsUpgrade python2-psycopg2-testsUpgrade python2-psycopg2-debug-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python-sqlalchemy-docUpgrade Cython-debugsourceUpgrade python2-wheelUpgrade babelUpgrade python2-pytestUpgrade scipy-debugsourceUpgrade python2-lxmlUpgrade python-pymongo-debuginfoUpgrade python2-tkinterUpgrade python2-develUpgrade python2-bson-debuginfoUpgrade python36-rpm-macrosUpgrade python2-scipyUpgrade python3-docutilsUpgrade python2-debugUpgrade python2-dnsUpgrade python3-docsUpgrade python2-pymongoUpgrade python3-scipyUpgrade python2-ipaddressUpgrade python-virtualenv-docUpgrade python2-debuginfoUpgrade python3-pymongo-gridfsUpgrade python2Upgrade python2-docutilsUpgrade python2-psycopg2Upgrade python2-setuptools_scmUpgrade python2-requestsUpgrade python3-pymongo-debuginfoUpgrade python36-develUpgrade python2-noseUpgrade python2-pymongo-gridfsUpgrade python2-virtualenvUpgrade python2-bsonUpgrade resource-agents-debugsourceUpgrade python3-wheelUpgrade python2-numpy-docUpgrade python2-attrsUpgrade python2-sqlalchemyUpgrade python-coverage-debugsourceUpgrade python3-noseUpgrade python2-libsUpgrade python2-pymongo-debuginfoUpgrade python2-coverageUpgrade python36Upgrade python2-chardetUpgrade python2-urllib3Upgrade python-psycopg2-docUpgrade python3-pygmentsUpgrade python2-sixUpgrade python2-numpyUpgrade python2-coverage-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-lxml-debuginfoUpgrade python2-wheel-wheelUpgrade resource-agents-aliyunUpgrade python2-setuptools-wheelUpgrade resource-agentsUpgrade python-lxml-debugsourceUpgrade python2-backportsUpgrade PyYAML-debugsourceUpgrade numpy-debugsourceUpgrade python2-setuptoolsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pytzUpgrade python3-virtualenvUpgrade python2-jinja2Upgrade resource-agents-pafUpgrade python3-bsonUpgrade python3-pymongoUpgrade python2-psycopg2-debuginfoUpgrade python-nose-docsUpgrade python2-pyUpgrade resource-agents-gcpUpgrade python3-sqlalchemyUpgrade python2-pipUpgrade python36-debugUpgrade python2-pip-wheelUpgrade python2-Cython-debuginfoUpgrade python2-idnaUpgrade python2-numpy-f2pyUpgrade python2-docs-infoUpgrade python2-pyyamlUpgrade python-pymongo-debugsourceUpgrade python2-pluggyUpgrade python2-scipy-debuginfoUpgrade python3-wheel-wheelUpgrade python2-babel | Nov 10, 2021 | Mar 23, 2021 |
| Rocky_linux | — | Upgrade python2-numpyUpgrade python-lxml-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade resource-agents-debugsourceUpgrade python2-sqlalchemyUpgrade resource-agents-aliyun-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-pyyaml-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-bson-debuginfoUpgrade python3-pymongo-gridfsUpgrade python2-toolsUpgrade python2-coverageUpgrade python2-numpy-debuginfoUpgrade python36-debugUpgrade python2-libsUpgrade python2-backportsUpgrade python2-Cython-debuginfoUpgrade python2Upgrade python2-testUpgrade python36Upgrade python2-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-develUpgrade python3-scipy-debuginfoUpgrade python2-scipyUpgrade python2-debugsourceUpgrade python2-CythonUpgrade python2-psycopg2-debugUpgrade PyYAML-debugsourceUpgrade python3-bsonUpgrade python2-pymongoUpgrade numpy-debugsourceUpgrade resource-agents-aliyunUpgrade python2-numpy-f2pyUpgrade resource-agents-pafUpgrade python-psycopg2-docUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2Upgrade python2-pyyamlUpgrade python3-bson-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-lxml-debuginfoUpgrade python3-scipyUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade python3-sqlalchemyUpgrade scipy-debugsourceUpgrade resource-agents-debuginfoUpgrade python-pymongo-debuginfoUpgrade python-pymongo-debugsourceUpgrade Cython-debugsourceUpgrade python3-pymongoUpgrade python2-markupsafeUpgrade resource-agents-gcpUpgrade python2-lxmlUpgrade resource-agentsUpgrade python3-pymongo-debuginfoUpgrade python2-coverage-debuginfoUpgrade python36-develUpgrade python2-tkinterUpgrade python2-debug | Mar 12, 2024 | Mar 23, 2021 |
| Suse | — | Upgrade python3-pygmentsUpgrade python2-pygments | May 5, 2021 | Mar 22, 2021 |
| Ubuntu | — | Upgrade python-pygmentsUpgrade python3-pygmentsUpgrade python-pygments (Ubuntu Pro)Upgrade python3-pygments (Ubuntu Pro) | Mar 23, 2021 | Mar 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub