The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py-pygments. | Sep 20, 2017 | Jan 8, 2016 |
| Debian | — | Upgrade pygments | Feb 2, 2016 | Jan 8, 2016 |
| Freebsd | — | Upgrade py27-pygmentsUpgrade py34-pygmentsUpgrade py32-pygmentsUpgrade py35-pygmentsUpgrade py33-pygments | Dec 10, 2025 | Jan 9, 2016 |
| Gentoo Linux | — | Upgrade dev-python/pygments. | Oct 30, 2017 | Jan 8, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-pygments | Feb 24, 2022 | Jan 8, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-pygments | Feb 12, 2024 | Jan 8, 2016 |
| Oracle Solaris | — | Upgrade library/python/pygments-27 to version 1.6-0.175.3.5.0.4.0 on Solaris 11.3Upgrade library/python/pygments to version 1.6-0.175.3.5.0.4.0 on Solaris 11.3Upgrade library/python/pygments-34 to version 1.6-0.175.3.5.0.4.0 on Solaris 11.3Upgrade library/python/pygments-26 to version 1.6-0.175.3.5.0.4.0 on Solaris 11.3 | May 29, 2017 | Jan 8, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 28, 2015 |
| Ubuntu | — | Upgrade python-pygmentsUpgrade python3-pygments | Feb 2, 2016 | Jan 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub