An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-wheelUpgrade python2-pytestUpgrade python2-backportsUpgrade python2-numpyUpgrade python3-distroUpgrade python2-pyUpgrade python2-ipaddressUpgrade python2-attrsUpgrade python2-docutilsUpgrade python3-noseUpgrade python-psycopg2-docUpgrade python3-virtualenvUpgrade python2-pymongo-gridfsUpgrade python2-pysocksUpgrade python2-pytzUpgrade python2-bsonUpgrade python3-pymongo-gridfsUpgrade python2-numpy-f2pyUpgrade resource-agentsUpgrade python2-setuptools-wheelUpgrade python2-mockUpgrade python2-psycopg2-debugUpgrade python2-coverageUpgrade python-nose-docsUpgrade python2-wheelUpgrade python2-dnsUpgrade python2-rpm-macrosUpgrade python2-backports-ssl_match_hostnameUpgrade python36-debugUpgrade python-virtualenv-docUpgrade python2-CythonUpgrade python3-docutilsUpgrade python36-develUpgrade python2-sixUpgrade python36-rpm-macrosUpgrade python2-docs-infoUpgrade python3-PyMySQLUpgrade python-sqlalchemy-docUpgrade python2-psycopg2Upgrade python2-markupsafeUpgrade python3-pymongoUpgrade python2-noseUpgrade python-pymongo-docUpgrade python2-psycopg2-testsUpgrade python36Upgrade python2-setuptoolsUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-pytest-mockUpgrade resource-agents-pafUpgrade python3-scipyUpgrade python2-PyMySQLUpgrade python3-docsUpgrade resource-agents-gcpUpgrade python2-pyyamlUpgrade python2-requestsUpgrade python2-virtualenvUpgrade python3-pygmentsUpgrade python2-pygmentsUpgrade python2-chardetUpgrade python2-scipyUpgrade python3-bsonUpgrade python2-docsUpgrade python3-sqlalchemyUpgrade python2-urllib3Upgrade python2-idnaUpgrade python2-babelUpgrade python2-numpy-docUpgrade python2-jinja2Upgrade python2-pymongoUpgrade python2-pluggyUpgrade python2-wheel-wheelUpgrade resource-agents-aliyunUpgrade babelUpgrade python3-wheel-wheelUpgrade python2-sqlalchemy | May 4, 2022 | Mar 23, 2021 |
| Alpine Linux | — | Upgrade py3-pygments | Aug 22, 2024 | Mar 23, 2021 |
| Centos_linux | — | Upgrade python2-jinja2Upgrade python2-pip-wheelUpgrade python-pymongo-debugsourceUpgrade PyYAML-debugsourceUpgrade python3-pymongoUpgrade python3-noseUpgrade python2-sixUpgrade python2-pytzUpgrade python2-numpy-f2pyUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python2-psycopg2-debuginfoUpgrade python2-debugsourceUpgrade python2-CythonUpgrade python2-attrsUpgrade python-coverage-debugsourceUpgrade python36-develUpgrade python2-funcsigsUpgrade numpy-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python2-bsonUpgrade python2-debuginfoUpgrade python2-psycopg2-debugUpgrade resource-agents-aliyun-debuginfoUpgrade python2-mockUpgrade python2-pipUpgrade python3-distroUpgrade python2-pytestUpgrade python2-develUpgrade python2-coverage-debuginfoUpgrade python2-testUpgrade python2-sqlalchemyUpgrade python-virtualenv-docUpgrade resource-agents-gcpUpgrade python3-PyMySQLUpgrade python2-virtualenvUpgrade python2-requestsUpgrade python36-rpm-macrosUpgrade python36-debugUpgrade python3-virtualenvUpgrade python2-urllib3Upgrade python2-Cython-debuginfoUpgrade python3-wheelUpgrade python3-scipy-debuginfoUpgrade python2-pygmentsUpgrade python2-docs-infoUpgrade python2-backportsUpgrade python2Upgrade python36Upgrade python3-pymongo-debuginfoUpgrade python2-pysocksUpgrade python2-numpyUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-markupsafeUpgrade python2-libsUpgrade resource-agents-debugsourceUpgrade python2-dnsUpgrade python2-pyUpgrade python2-wheelUpgrade python2-rpm-macrosUpgrade python2-scipy-debuginfoUpgrade python2-pyyamlUpgrade python-psycopg2-debuginfoUpgrade python2-babelUpgrade python-nose-docsUpgrade python2-pyyaml-debuginfoUpgrade python3-sqlalchemyUpgrade python2-ipaddressUpgrade python2-lxml-debuginfoUpgrade python2-numpy-docUpgrade resource-agents-pafUpgrade python-lxml-debugsourceUpgrade python2-setuptools-wheelUpgrade python2-pluggyUpgrade python2-PyMySQLUpgrade python2-docsUpgrade python2-wheel-wheelUpgrade python3-docsUpgrade python2-bson-debuginfoUpgrade python2-scipyUpgrade python2-lxmlUpgrade babelUpgrade python3-pymongo-gridfsUpgrade python2-chardetUpgrade python2-numpy-debuginfoUpgrade resource-agentsUpgrade python2-psycopg2-testsUpgrade python-pymongo-docUpgrade python-psycopg2-docUpgrade python2-toolsUpgrade python2-coverageUpgrade python2-idnaUpgrade python2-pymongoUpgrade python2-pytest-mockUpgrade python3-bsonUpgrade python3-wheel-wheelUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2Upgrade python2-debugUpgrade resource-agents-aliyunUpgrade python3-pygmentsUpgrade resource-agents-debuginfoUpgrade scipy-debugsourceUpgrade python2-backports-ssl_match_hostnameUpgrade python2-docutilsUpgrade python3-scipyUpgrade Cython-debugsourceUpgrade python3-docutilsUpgrade python-sqlalchemy-docUpgrade python2-noseUpgrade python-pymongo-debuginfoUpgrade python2-setuptoolsUpgrade python2-tkinterUpgrade python3-bson-debuginfo | Nov 10, 2021 | Mar 23, 2021 |
| Debian | — | Upgrade mediawikiUpgrade pygments | Mar 15, 2021 | Mar 15, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade py311-pygmentsUpgrade py39-pygments-25Upgrade py37-pygmentsUpgrade py310-pygments-25Upgrade py38-pygmentsUpgrade py310-pygmentsUpgrade py311-pygments-25Upgrade py37-pygments-25Upgrade py39-pygmentsUpgrade py38-pygments-25 | Sep 1, 2023 | Aug 31, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pygments | Sep 16, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-pygmentsUpgrade python3-pygments | May 18, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pygments-helpUpgrade python3-pygments | Jul 2, 2021 | Mar 23, 2021 |
| Oracle Solaris | — | Upgrade library/python/pygments-37 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-39 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-27 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 23, 2021 |
| Oracle_linux | — | Upgrade python2-pytest-mockUpgrade python2-sqlalchemyUpgrade python2-coverageUpgrade python2-setuptoolsUpgrade python3-wheel-wheelUpgrade python2-chardetUpgrade python2-noseUpgrade python-nose-docsUpgrade python2-PyMySQLUpgrade python2-pluggyUpgrade python2-pyyamlUpgrade python3-scipyUpgrade python3-docsUpgrade python2-tkinterUpgrade python36Upgrade python2-pymongoUpgrade python2-wheel-wheelUpgrade python2-babelUpgrade resource-agentsUpgrade python2-develUpgrade python2-lxmlUpgrade python3-docutilsUpgrade python2-toolsUpgrade python3-pygmentsUpgrade python2-numpy-docUpgrade python3-pymongo-gridfsUpgrade python2-idnaUpgrade python-pymongo-docUpgrade python2-debugUpgrade python3-bsonUpgrade python2-scipyUpgrade python2-docsUpgrade python2-psycopg2-testsUpgrade python2-setuptools-wheelUpgrade python2-ipaddressUpgrade python2-psycopg2Upgrade python3-sqlalchemyUpgrade python-sqlalchemy-docUpgrade python2-pytestUpgrade python2-dnsUpgrade python-virtualenv-docUpgrade python2-docutilsUpgrade python3-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pytzUpgrade python2-urllib3Upgrade python2-bsonUpgrade python2-wheelUpgrade python2-pygmentsUpgrade python3-virtualenvUpgrade python2-rpm-macrosUpgrade python2-jinja2Upgrade python2-testUpgrade python2-pysocksUpgrade python2-virtualenvUpgrade python2Upgrade python2-libsUpgrade python2-attrsUpgrade python2-pip-wheelUpgrade python2-pipUpgrade python3-PyMySQLUpgrade python2-CythonUpgrade babelUpgrade python36-develUpgrade python-psycopg2-docUpgrade python2-pymongo-gridfsUpgrade python2-sixUpgrade python3-pymongoUpgrade python2-backportsUpgrade python2-docs-infoUpgrade python2-setuptools_scmUpgrade python2-funcsigsUpgrade python2-markupsafeUpgrade python3-noseUpgrade python2-pyUpgrade python36-debugUpgrade python2-numpyUpgrade python36-rpm-macrosUpgrade python3-distroUpgrade python2-numpy-f2pyUpgrade python2-requestsUpgrade python2-psycopg2-debugUpgrade python2-mock | Nov 19, 2021 | Dec 10, 2020 |
| Redhat_linux | — | Upgrade python2-docs-infoUpgrade python3-sqlalchemyUpgrade python2-sixUpgrade resource-agents-gcpUpgrade resource-agents-aliyunUpgrade python2-pluggyUpgrade python3-wheel-wheelUpgrade resource-agents-pafUpgrade python2-pyyaml-debuginfoUpgrade python-pymongo-debugsourceUpgrade python-psycopg2-docUpgrade python2-idnaUpgrade python2-pip-wheelUpgrade python2-setuptools-wheelUpgrade python2-numpy-f2pyUpgrade python2-Cython-debuginfoUpgrade python2-babelUpgrade python2-coverage-debuginfoUpgrade python2-wheel-wheelUpgrade resource-agentsUpgrade python2-numpyUpgrade python2-setuptoolsUpgrade python2-backports-ssl_match_hostnameUpgrade python3-virtualenvUpgrade python-nose-docsUpgrade python2-pipUpgrade python2-pytzUpgrade python36-debugUpgrade python-psycopg2-debuginfoUpgrade python2-pyyamlUpgrade python3-bsonUpgrade python2-psycopg2-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-scipy-debuginfoUpgrade python2-chardetUpgrade python3-pygmentsUpgrade python2-urllib3Upgrade python-lxml-debugsourceUpgrade python3-pymongoUpgrade python2-jinja2Upgrade python2-lxml-debuginfoUpgrade python2-backportsUpgrade numpy-debugsourceUpgrade python2-pyUpgrade python36Upgrade python2-pytest-mockUpgrade python3-bson-debuginfoUpgrade python3-wheelUpgrade python2-develUpgrade python2-dnsUpgrade python2-pytestUpgrade python2-wheelUpgrade python-sqlalchemy-docUpgrade python2-docutilsUpgrade python2-docsUpgrade python2-bsonUpgrade python-coverage-debugsourceUpgrade python36-develUpgrade python2-pymongo-debuginfoUpgrade python2-coverageUpgrade python2-libsUpgrade python3-noseUpgrade python3-pymongo-debuginfoUpgrade resource-agents-debuginfoUpgrade python2-PyMySQLUpgrade python-pymongo-docUpgrade python2-mockUpgrade python-psycopg2-debugsourceUpgrade python3-distroUpgrade python2-psycopg2-debugUpgrade python2-lxmlUpgrade python2-numpy-debuginfoUpgrade babelUpgrade python2-psycopg2-testsUpgrade python3-docsUpgrade python2-pysocksUpgrade python2-rpm-macrosUpgrade python2-psycopg2-debug-debuginfoUpgrade python3-scipyUpgrade python2-toolsUpgrade python2-debugsourceUpgrade python2-scipyUpgrade Cython-debugsourceUpgrade python2-debuginfoUpgrade python2-CythonUpgrade python2-tkinterUpgrade python2-testUpgrade python2-debugUpgrade python2-pymongoUpgrade python2-markupsafeUpgrade python2-bson-debuginfoUpgrade python3-pymongo-gridfsUpgrade python3-docutilsUpgrade python2-ipaddressUpgrade python2-virtualenvNo solution existsUpgrade python2-sqlalchemyUpgrade python-virtualenv-docUpgrade python36-rpm-macrosUpgrade python3-PyMySQLUpgrade python2-numpy-docUpgrade scipy-debugsourceUpgrade python2-noseUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python-pymongo-debuginfoUpgrade python2Upgrade resource-agents-debugsourceUpgrade resource-agents-aliyun-debuginfoUpgrade python2-requestsUpgrade python3-scipy-debuginfoUpgrade python2-funcsigsUpgrade python2-pygmentsUpgrade python2-attrsUpgrade python2-psycopg2 | Nov 10, 2021 | Mar 23, 2021 |
| Rocky_linux | — | Upgrade python2-Cython-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pymongo-gridfsUpgrade python3-pymongo-gridfsUpgrade python2-pymongo-debuginfoUpgrade python2-testUpgrade python2-debuginfoUpgrade python2-debugsourceUpgrade python2-psycopg2-debugUpgrade python2Upgrade resource-agents-debugsourceUpgrade python2-backportsUpgrade python-lxml-debugsourceUpgrade python2-libsUpgrade python3-scipy-debuginfoUpgrade python36Upgrade resource-agents-aliyun-debuginfoUpgrade python2-scipyUpgrade python2-toolsUpgrade python36-debugUpgrade python2-pyyaml-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-develUpgrade python2-coverageUpgrade python2-sqlalchemyUpgrade python-coverage-debugsourceUpgrade python2-numpy-debuginfoUpgrade python2-numpyUpgrade python-psycopg2-debuginfoUpgrade python2-bson-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-CythonUpgrade resource-agents-gcpUpgrade python-pymongo-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-pymongoUpgrade python3-sqlalchemyUpgrade python36-develUpgrade python2-tkinterUpgrade python2-debugUpgrade numpy-debugsourceUpgrade python-psycopg2-docUpgrade resource-agents-debuginfoUpgrade python3-scipyUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade python2-lxmlUpgrade python3-bsonUpgrade python3-pymongo-debuginfoUpgrade resource-agentsUpgrade resource-agents-pafUpgrade python2-coverage-debuginfoUpgrade python2-psycopg2Upgrade python3-pymongoUpgrade Cython-debugsourceUpgrade python-pymongo-debugsourceUpgrade python2-pyyamlUpgrade python2-markupsafeUpgrade scipy-debugsourceUpgrade python3-bson-debuginfoUpgrade python2-lxml-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python-psycopg2-debugsourceUpgrade resource-agents-aliyun | Mar 12, 2024 | Mar 23, 2021 |
| Suse | — | Upgrade python3-pygmentsUpgrade python2-pygments | May 5, 2021 | Mar 22, 2021 |
| Ubuntu | — | Upgrade python-pygmentsUpgrade python3-pygments (Ubuntu Pro)Upgrade python3-pygmentsUpgrade python-pygments (Ubuntu Pro) | Mar 23, 2021 | Mar 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub