The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-dnsUpgrade python2-bsonUpgrade python2-sixUpgrade resource-agentsUpgrade python3-pymongoUpgrade python2-docsUpgrade python2-wheelUpgrade python3-distroUpgrade python36-debugUpgrade python2-mockUpgrade python3-scipyUpgrade python2-urllib3Upgrade python2-pyyamlUpgrade python2-pygmentsUpgrade python2-numpy-f2pyUpgrade python2-pysocksUpgrade resource-agents-gcpUpgrade python2-pytestUpgrade python2-rpm-macrosUpgrade python3-noseUpgrade resource-agents-aliyunUpgrade python-nose-docsUpgrade python2-psycopg2-testsUpgrade python2-psycopg2Upgrade python2-pymongo-gridfsUpgrade python2-setuptools-wheelUpgrade python2-attrsUpgrade python2-noseUpgrade python2-backports-ssl_match_hostnameUpgrade python2-chardetUpgrade python3-wheelUpgrade python2-psycopg2-debugUpgrade python3-docsUpgrade python2-pymongoUpgrade resource-agents-pafUpgrade python-psycopg2-docUpgrade python36-develUpgrade python2-wheel-wheelUpgrade python2-markupsafeUpgrade python2-pytest-mockUpgrade python2-setuptoolsUpgrade python2-backportsUpgrade python3-pymongo-gridfsUpgrade python2-funcsigsUpgrade python3-wheel-wheelUpgrade python2-pytzUpgrade python-sqlalchemy-docUpgrade python3-pygmentsUpgrade python2-numpy-docUpgrade python2-pyUpgrade python2-pluggyUpgrade python2-CythonUpgrade python2-idnaUpgrade python36-rpm-macrosUpgrade python3-virtualenvUpgrade python-pymongo-docUpgrade python3-PyMySQLUpgrade python3-docutilsUpgrade python36Upgrade python2-coverageUpgrade python2-sqlalchemyUpgrade python2-jinja2Upgrade python3-bsonUpgrade python2-setuptools_scmUpgrade python-virtualenv-docUpgrade python2-docs-infoUpgrade python2-requestsUpgrade python2-ipaddressUpgrade babelUpgrade python2-scipyUpgrade python2-PyMySQLUpgrade python2-numpyUpgrade python2-docutilsUpgrade python3-sqlalchemyUpgrade python2-virtualenvUpgrade python2-babel | May 4, 2022 | Mar 17, 2021 |
| Alpine Linux | — | Upgrade py3-pygments | Oct 1, 2024 | Mar 17, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-pygmentsUpgrade python3-pygments-docUpgrade python3-pygments | Jul 21, 2023 | Mar 17, 2021 |
| Centos_linux | — | Upgrade python2-pytestUpgrade python2-testUpgrade python2-markupsafeUpgrade python2Upgrade python2-debuginfoUpgrade python2-docs-infoUpgrade python2-urllib3Upgrade python2-pip-wheelUpgrade python2-numpy-debuginfoUpgrade python2-pyUpgrade python36Upgrade python2-develUpgrade python2-toolsUpgrade python3-noseUpgrade resource-agents-gcpUpgrade python2-pyyaml-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade python2-pytzUpgrade python2-bson-debuginfoUpgrade python2-Cython-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-pymongo-debuginfoUpgrade python3-wheel-wheelUpgrade python3-PyMySQLUpgrade python2-sqlalchemyUpgrade python2-setuptools-wheelUpgrade python2-libsUpgrade python2-jinja2Upgrade numpy-debugsourceUpgrade python3-virtualenvUpgrade python2-scipyUpgrade python2-psycopg2-debugUpgrade python-virtualenv-docUpgrade python2-pipUpgrade python2-pysocksUpgrade python-lxml-debugsourceUpgrade python36-debugUpgrade resource-agents-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python3-distroUpgrade python2-attrsUpgrade python-nose-docsUpgrade python-coverage-debugsourceUpgrade python2-coverage-debuginfoUpgrade python36-rpm-macrosUpgrade python2-PyMySQLUpgrade python2-docutilsUpgrade python2-chardetUpgrade python2-idnaUpgrade python2-lxml-debuginfoUpgrade python2-numpyUpgrade PyYAML-debugsourceUpgrade python3-pymongoUpgrade python2-backportsUpgrade python2-CythonUpgrade python2-pytest-mockUpgrade python2-ipaddressUpgrade python2-babelUpgrade python2-bsonUpgrade python36-develUpgrade python2-wheel-wheelUpgrade python-pymongo-debugsourceUpgrade python2-wheelUpgrade babelUpgrade resource-agents-aliyunUpgrade python2-psycopg2-testsUpgrade resource-agents-pafUpgrade python3-scipyUpgrade python2-virtualenvUpgrade python2-sixUpgrade python2-setuptoolsUpgrade python2-requestsUpgrade python2-lxmlUpgrade python3-pymongo-debuginfoUpgrade python2-tkinterUpgrade scipy-debugsourceUpgrade python3-docsUpgrade python3-wheelUpgrade python3-bson-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-mockUpgrade python2-coverageUpgrade python-psycopg2-docUpgrade python-psycopg2-debuginfoUpgrade python3-docutilsUpgrade python2-numpy-docUpgrade python2-docsUpgrade python2-debugUpgrade python3-bsonUpgrade python2-psycopg2-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-pymongoUpgrade python3-scipy-debuginfoUpgrade python3-pymongo-gridfsUpgrade python2-pygmentsUpgrade python-pymongo-docUpgrade python-sqlalchemy-docUpgrade python2-setuptools_scmUpgrade python2-dnsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-rpm-macrosUpgrade python2-pluggyUpgrade python2-numpy-f2pyUpgrade resource-agents-debuginfoUpgrade python2-noseUpgrade resource-agentsUpgrade python3-pygmentsUpgrade python2-psycopg2Upgrade python2-debugsourceUpgrade python-psycopg2-debugsourceUpgrade Cython-debugsourceUpgrade python3-sqlalchemyUpgrade python2-pyyamlUpgrade python2-funcsigs | Nov 10, 2021 | Mar 17, 2021 |
| Debian | — | Upgrade mediawikiUpgrade pygments | Mar 22, 2021 | Mar 17, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade py310-pygmentsUpgrade py37-pygmentsUpgrade py310-pygments-25Upgrade py38-pygmentsUpgrade py311-pygmentsUpgrade py39-pygments-25Upgrade py37-pygments-25Upgrade py311-pygments-25Upgrade py39-pygmentsUpgrade py38-pygments-25 | Sep 1, 2023 | Aug 31, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pygments | Sep 16, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-pygments | Apr 30, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-pygments | Jul 19, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-pygmentsUpgrade python2-pygments | May 18, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pygments-helpUpgrade python3-pygments | Jul 2, 2021 | Mar 17, 2021 |
| Oracle Solaris | — | Upgrade library/python/pygments-39 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-27 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-37 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 17, 2021 |
| Oracle_linux | — | Upgrade python2-sqlalchemyUpgrade python2-toolsUpgrade python3-PyMySQLUpgrade python36-debugUpgrade python2-pyyamlUpgrade python3-distroUpgrade python2-attrsUpgrade python2-backportsUpgrade python36Upgrade python2-scipyUpgrade python2-ipaddressUpgrade python3-pymongo-gridfsUpgrade python2-CythonUpgrade python-nose-docsUpgrade python2-docs-infoUpgrade python2-setuptools-wheelUpgrade python2-pytzUpgrade python2-pyUpgrade python2-testUpgrade python2-pytest-mockUpgrade python2-numpyUpgrade python2-psycopg2-debugUpgrade python3-wheel-wheelUpgrade python2-libsUpgrade python2-pipUpgrade python2-PyMySQLUpgrade python2-virtualenvUpgrade python2-coverageUpgrade python36-rpm-macrosUpgrade python2-develUpgrade python-virtualenv-docUpgrade python2-pysocksUpgrade python2-idnaUpgrade python3-noseUpgrade python2-pip-wheelUpgrade python2-funcsigsUpgrade python2-jinja2Upgrade python2-docutilsUpgrade python3-virtualenvUpgrade python2Upgrade babelUpgrade python2-pymongo-gridfsUpgrade python2-chardetUpgrade python2-babelUpgrade python2-wheel-wheelUpgrade python2-mockUpgrade python2-debugUpgrade python2-dnsUpgrade python2-noseUpgrade python3-sqlalchemyUpgrade python2-pygmentsUpgrade python2-lxmlUpgrade python2-psycopg2Upgrade python2-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python-sqlalchemy-docUpgrade python2-sixUpgrade python2-setuptools_scmUpgrade python2-pluggyUpgrade python2-docsUpgrade python-psycopg2-docUpgrade python2-pymongoUpgrade python3-pymongoUpgrade python2-requestsUpgrade python2-numpy-f2pyUpgrade python3-bsonUpgrade python2-tkinterUpgrade python2-setuptoolsUpgrade python2-markupsafeUpgrade python2-psycopg2-testsUpgrade python3-wheelUpgrade python2-rpm-macrosUpgrade python3-docsUpgrade python3-pygmentsUpgrade python2-pytestUpgrade python-pymongo-docUpgrade python2-bsonUpgrade python36-develUpgrade python3-scipyUpgrade python2-urllib3Upgrade python2-numpy-docUpgrade python3-docutilsUpgrade resource-agents | Nov 19, 2021 | Jan 11, 2021 |
| Redhat_linux | — | Upgrade python2-psycopg2-testsUpgrade python3-noseUpgrade python2-psycopg2-debuginfoUpgrade python2-virtualenvUpgrade python3-wheelUpgrade python3-docutilsUpgrade python-sqlalchemy-docUpgrade python3-virtualenvUpgrade python3-pymongo-debuginfoUpgrade python2-docsUpgrade python3-pymongoUpgrade python2-debugsourceUpgrade python2-numpy-docUpgrade python3-scipy-debuginfoUpgrade python2-requestsUpgrade python2-tkinterUpgrade resource-agents-aliyunUpgrade python2Upgrade python2-mockUpgrade numpy-debugsourceUpgrade python2-docs-infoUpgrade python2-pygmentsUpgrade python3-bson-debuginfoUpgrade python2-toolsUpgrade resource-agents-aliyun-debuginfoUpgrade python2-debuginfoUpgrade python2-wheelUpgrade python2-testUpgrade python2-dnsUpgrade python36Upgrade python-coverage-debugsourceUpgrade python2-psycopg2-debugUpgrade python2-wheel-wheelUpgrade python3-distroUpgrade python36-develUpgrade python2-funcsigsUpgrade resource-agents-pafUpgrade python2-rpm-macrosUpgrade python2-lxmlUpgrade python2-pymongo-gridfsUpgrade python2-pyUpgrade python2-sqlalchemyUpgrade python2-pip-wheelUpgrade python2-backportsUpgrade python2-pytest-mockUpgrade python2-numpyUpgrade PyYAML-debugsourceUpgrade python2-pytzUpgrade python2-pytestUpgrade python2-bsonUpgrade python2-PyMySQLUpgrade python2-backports-ssl_match_hostnameUpgrade resource-agents-debugsourceUpgrade python2-pysocksUpgrade python2-develUpgrade python2-docutilsUpgrade python2-markupsafeUpgrade python2-scipyUpgrade babelUpgrade python2-setuptools_scmUpgrade python2-attrsUpgrade python2-chardetUpgrade python2-idnaUpgrade python2-pipUpgrade python3-wheel-wheelUpgrade python2-sixUpgrade python36-debugUpgrade python2-lxml-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-setuptools-wheelUpgrade python3-docsUpgrade python3-bsonUpgrade python3-pygmentsUpgrade python2-pymongo-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade scipy-debugsourceUpgrade python2-urllib3Upgrade python3-sqlalchemyUpgrade python-pymongo-debuginfoUpgrade Cython-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python2-noseUpgrade python-virtualenv-docUpgrade python2-setuptoolsUpgrade python3-PyMySQLUpgrade python2-debugUpgrade python3-pymongo-gridfsNo solution existsUpgrade python2-numpy-f2pyUpgrade python-nose-docsUpgrade python2-babelUpgrade python3-scipyUpgrade python2-psycopg2Upgrade python2-Cython-debuginfoUpgrade python2-CythonUpgrade python-pymongo-debugsourceUpgrade resource-agents-debuginfoUpgrade python-psycopg2-docUpgrade python2-numpy-debuginfoUpgrade python2-pyyamlUpgrade resource-agents-gcpUpgrade python2-bson-debuginfoUpgrade python-pymongo-docUpgrade python36-rpm-macrosUpgrade python2-coverageUpgrade python2-libsUpgrade python2-jinja2Upgrade python2-scipy-debuginfoUpgrade python2-pluggyUpgrade python2-pymongoUpgrade resource-agentsUpgrade python-lxml-debugsourceUpgrade python2-ipaddress | Nov 10, 2021 | Mar 17, 2021 |
| Rocky_linux | — | Upgrade resource-agents-gcpUpgrade python2-pymongo-debuginfoUpgrade python2-CythonUpgrade resource-agents-debugsourceUpgrade python2-debuginfoUpgrade python3-pymongoUpgrade python2-bsonUpgrade PyYAML-debugsourceUpgrade python-pymongo-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-lxml-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-develUpgrade python2-coverage-debuginfoUpgrade python2-numpyUpgrade python2-testUpgrade python2-psycopg2-debugUpgrade python2-numpy-debuginfoUpgrade python36-debugUpgrade python2-numpy-f2pyUpgrade python2-toolsUpgrade python-psycopg2-docUpgrade python2-backportsUpgrade python3-pymongo-debuginfoUpgrade python2Upgrade python2-bson-debuginfoUpgrade resource-agentsUpgrade python-lxml-debugsourceUpgrade resource-agents-aliyun-debuginfoUpgrade python2-markupsafeUpgrade python2-psycopg2-debug-debuginfoUpgrade python36-develUpgrade python2-Cython-debuginfoUpgrade python2-libsUpgrade numpy-debugsourceUpgrade python36Upgrade python3-scipyUpgrade python2-tkinterUpgrade python2-lxmlUpgrade python2-debugUpgrade python3-scipy-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-sqlalchemyUpgrade resource-agents-debuginfoUpgrade python2-scipyUpgrade python2-debugsourceUpgrade python2-pyyamlUpgrade python-psycopg2-debuginfoUpgrade scipy-debugsourceUpgrade resource-agents-pafUpgrade python2-psycopg2Upgrade python-pymongo-debuginfoUpgrade python3-pymongo-gridfsUpgrade python3-bsonUpgrade python2-pymongoUpgrade Cython-debugsourceUpgrade resource-agents-aliyunUpgrade python2-coverageUpgrade python3-bson-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python3-sqlalchemyUpgrade python2-scipy-debuginfoUpgrade python-psycopg2-debugsource | Mar 12, 2024 | Mar 17, 2021 |
| Suse | — | Upgrade python2-pygmentsUpgrade python-pygmentsUpgrade python3-pygments | Dec 2, 2021 | Mar 17, 2021 |
| Ubuntu | — | Upgrade python-pygments (Ubuntu Pro)Upgrade python3-pygments (Ubuntu Pro)Upgrade python3-pygmentsUpgrade python-pygments | Mar 31, 2021 | Mar 17, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub