An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-numpyUpgrade python2-pytzUpgrade python-psycopg2-docUpgrade python2-pysocksUpgrade python2-backports-ssl_match_hostnameUpgrade python2-ipaddressUpgrade python2-docutilsUpgrade python3-PyMySQLUpgrade python2-pyUpgrade python2-coverageUpgrade python-nose-docsUpgrade python3-distroUpgrade resource-agentsUpgrade python2-psycopg2-debugUpgrade python2-bsonUpgrade python2-numpy-f2pyUpgrade python2-setuptools-wheelUpgrade python2-mockUpgrade python2-CythonUpgrade python2-docs-infoUpgrade python2-backportsUpgrade python-virtualenv-docUpgrade python2-pytestUpgrade python36-rpm-macrosUpgrade python2-wheelUpgrade python3-pymongo-gridfsUpgrade python3-noseUpgrade python2-rpm-macrosUpgrade python2-dnsUpgrade python2-sixUpgrade python36-debugUpgrade python2-attrsUpgrade python2-pymongo-gridfsUpgrade python3-wheelUpgrade python3-docutilsUpgrade python36-develUpgrade python3-virtualenvUpgrade python2-pluggyUpgrade python2-chardetUpgrade python2-babelUpgrade python2-pytest-mockUpgrade python2-numpy-docUpgrade python2-scipyUpgrade python2-pygmentsUpgrade python2-docsUpgrade python3-docsUpgrade python3-pygmentsUpgrade python2-requestsUpgrade resource-agents-pafUpgrade python3-bsonUpgrade resource-agents-aliyunUpgrade python2-virtualenvUpgrade python2-wheel-wheelUpgrade python2-pymongoUpgrade python3-pymongoUpgrade python2-idnaUpgrade python-sqlalchemy-docUpgrade babelUpgrade python2-sqlalchemyUpgrade python3-wheel-wheelUpgrade python2-markupsafeUpgrade python2-psycopg2Upgrade python2-noseUpgrade python3-sqlalchemyUpgrade python2-PyMySQLUpgrade python2-funcsigsUpgrade python2-setuptoolsUpgrade python36Upgrade python2-setuptools_scmUpgrade python-pymongo-docUpgrade python3-scipyUpgrade python2-urllib3Upgrade python2-jinja2Upgrade resource-agents-gcpUpgrade python2-pyyamlUpgrade python2-psycopg2-tests | May 4, 2022 | Mar 23, 2021 |
| Alpine Linux | — | Upgrade py3-pygments | Aug 22, 2024 | Mar 23, 2021 |
| Centos_linux | — | Upgrade python2-pysocksUpgrade python2-numpyUpgrade python2-jinja2Upgrade python2-pymongo-debuginfoUpgrade python36Upgrade python2-pyUpgrade python36-rpm-macrosUpgrade python2-psycopg2-debugUpgrade python2Upgrade python2-pipUpgrade resource-agents-debugsourceUpgrade python2-libsUpgrade python2-markupsafeUpgrade python2-Cython-debuginfoUpgrade python2-urllib3Upgrade python3-virtualenvUpgrade python3-scipy-debuginfoUpgrade python2-debuginfoUpgrade python2-docs-infoUpgrade resource-agents-aliyun-debuginfoUpgrade python2-pip-wheelUpgrade python2-wheelUpgrade python36-debugUpgrade python2-requestsUpgrade python2-mockUpgrade python-pymongo-debugsourceUpgrade python2-bsonUpgrade numpy-debugsourceUpgrade python2-funcsigsUpgrade python2-psycopg2-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-attrsUpgrade python2-debugsourceUpgrade python2-pymongo-gridfsUpgrade python3-pymongo-debuginfoUpgrade python2-dnsUpgrade python2-sixUpgrade python3-noseUpgrade python2-setuptools_scmUpgrade PyYAML-debugsourceUpgrade python36-develUpgrade python2-numpy-f2pyUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-CythonUpgrade python3-pymongoUpgrade python2-pytzUpgrade python3-distroUpgrade python3-PyMySQLUpgrade python2-virtualenvUpgrade resource-agents-gcpUpgrade python3-wheelUpgrade python-virtualenv-docUpgrade python2-backportsUpgrade python2-sqlalchemyUpgrade python2-testUpgrade python2-pygmentsUpgrade python2-coverage-debuginfoUpgrade python2-pytestUpgrade python2-develUpgrade python2-toolsUpgrade python2-pytest-mockUpgrade python2-idnaUpgrade python-sqlalchemy-docUpgrade python2-lxmlUpgrade babelUpgrade python3-pymongo-gridfsUpgrade python2-setuptools-wheelUpgrade resource-agentsUpgrade python2-docsUpgrade python2-pymongoUpgrade python2-scipy-debuginfoUpgrade python2-pluggyUpgrade python2-backports-ssl_match_hostnameUpgrade python2-PyMySQLUpgrade python2-setuptoolsUpgrade python2-scipyUpgrade python2-noseUpgrade python2-coverageUpgrade python2-chardetUpgrade python-pymongo-docUpgrade scipy-debugsourceUpgrade python3-scipyUpgrade python3-pygmentsUpgrade python3-docsUpgrade python3-bson-debuginfoUpgrade python2-tkinterUpgrade python2-pyyaml-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-babelUpgrade python-psycopg2-debuginfoUpgrade python-lxml-debugsourceUpgrade python2-psycopg2-testsUpgrade python2-ipaddressUpgrade python-psycopg2-debugsourceUpgrade python3-bsonUpgrade python2-rpm-macrosUpgrade python2-numpy-docUpgrade python2-lxml-debuginfoUpgrade resource-agents-pafUpgrade python2-wheel-wheelUpgrade python2-psycopg2Upgrade python-psycopg2-docUpgrade python-nose-docsUpgrade Cython-debugsourceUpgrade resource-agents-aliyunUpgrade python3-wheel-wheelUpgrade python3-docutilsUpgrade python2-debugUpgrade resource-agents-debuginfoUpgrade python2-bson-debuginfoUpgrade python-pymongo-debuginfoUpgrade python3-sqlalchemyUpgrade python2-pyyamlUpgrade python2-docutils | Nov 10, 2021 | Mar 23, 2021 |
| Debian | — | Upgrade mediawikiUpgrade pygments | Mar 15, 2021 | Mar 15, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade py39-pygments-25Upgrade py311-pygmentsUpgrade py37-pygmentsUpgrade py310-pygments-25Upgrade py311-pygments-25Upgrade py37-pygments-25Upgrade py38-pygmentsUpgrade py39-pygmentsUpgrade py38-pygments-25Upgrade py310-pygments | Sep 1, 2023 | Aug 31, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pygments | Sep 16, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-pygmentsUpgrade python2-pygments | May 18, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pygments-helpUpgrade python3-pygments | Jul 2, 2021 | Mar 23, 2021 |
| Oracle Solaris | — | Upgrade library/python/pygments-27 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-39 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-37 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 23, 2021 |
| Oracle_linux | — | Upgrade python3-PyMySQLUpgrade python36-develUpgrade python2-pysocksUpgrade python2-dnsUpgrade python2-psycopg2-debugUpgrade python2-numpy-f2pyUpgrade python2-docutilsUpgrade python2-mockUpgrade python2-sixUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python2-pipUpgrade python3-pymongoUpgrade python2Upgrade python2-libsUpgrade python2-pytestUpgrade python2-virtualenvUpgrade python2-attrsUpgrade python2-CythonUpgrade python-psycopg2-docUpgrade python3-virtualenvUpgrade python2-bsonUpgrade python2-pyUpgrade python36-debugUpgrade python3-noseUpgrade python2-pip-wheelUpgrade python36-rpm-macrosUpgrade python3-wheelUpgrade python3-distroUpgrade python2-testUpgrade python2-rpm-macrosUpgrade python2-urllib3Upgrade python2-jinja2Upgrade python2-numpyUpgrade python2-pygmentsUpgrade python2-docs-infoUpgrade python2-pytzUpgrade python-virtualenv-docUpgrade python2-markupsafeUpgrade python2-backportsUpgrade python2-wheelUpgrade babelUpgrade python2-backports-ssl_match_hostnameUpgrade python2-requestsUpgrade python3-pymongo-gridfsUpgrade python3-pygmentsUpgrade python2-psycopg2Upgrade python2-ipaddressUpgrade python2-develUpgrade python2-numpy-docUpgrade resource-agentsUpgrade python2-pyyamlUpgrade python2-wheel-wheelUpgrade python2-debugUpgrade python-pymongo-docUpgrade python3-docsUpgrade python2-PyMySQLUpgrade python3-sqlalchemyUpgrade python2-sqlalchemyUpgrade python2-pytest-mockUpgrade python2-pymongoUpgrade python2-lxmlUpgrade python-sqlalchemy-docUpgrade python3-docutilsUpgrade python3-bsonUpgrade python2-setuptools-wheelUpgrade python-nose-docsUpgrade python2-psycopg2-testsUpgrade python2-docsUpgrade python3-scipyUpgrade python2-toolsUpgrade python2-scipyUpgrade python2-babelUpgrade python2-tkinterUpgrade python2-chardetUpgrade python3-wheel-wheelUpgrade python2-setuptoolsUpgrade python36Upgrade python2-noseUpgrade python2-idnaUpgrade python2-coverageUpgrade python2-pluggy | Nov 19, 2021 | Dec 10, 2020 |
| Redhat_linux | — | Upgrade python2-attrsUpgrade python2-sqlalchemyUpgrade python2-pygmentsUpgrade python2-develUpgrade python3-wheelUpgrade resource-agents-debuginfoUpgrade python2-PyMySQLUpgrade resource-agents-debugsourceUpgrade python2-testUpgrade resource-agents-aliyun-debuginfoUpgrade python2-libsUpgrade python36-develUpgrade python2-pymongo-debuginfoUpgrade python36Upgrade python-virtualenv-docUpgrade python2-pytest-mockUpgrade python3-pymongo-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-numpy-docUpgrade python3-noseUpgrade python2-coverageUpgrade python2-pysocksUpgrade Cython-debugsourceUpgrade python2-ipaddressUpgrade python3-bson-debuginfoUpgrade python3-scipy-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2Upgrade python2-bsonUpgrade python36-rpm-macrosUpgrade python-sqlalchemy-docUpgrade python2-setuptools_scmUpgrade scipy-debugsourceUpgrade python2-docsUpgrade python2-wheelUpgrade python2-rpm-macrosUpgrade python2-numpy-debuginfoNo solution existsUpgrade python3-PyMySQLUpgrade python-pymongo-debuginfoUpgrade python2-docutilsUpgrade python2-psycopg2-testsUpgrade python2-pytestUpgrade babelUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-requestsUpgrade python3-docsUpgrade python2-virtualenvUpgrade python2-lxmlUpgrade python3-distroUpgrade python-pymongo-docUpgrade python2-mockUpgrade python2-psycopg2-debugUpgrade python2-dnsUpgrade python2-noseUpgrade python2-pymongoUpgrade python-psycopg2-debugsourceUpgrade python2-toolsUpgrade python2-psycopg2Upgrade python2-scipyUpgrade python2-bson-debuginfoUpgrade python3-pymongo-gridfsUpgrade python3-docutilsUpgrade python2-CythonUpgrade python3-scipyUpgrade python2-funcsigsUpgrade python2-markupsafeUpgrade python2-debugsourceUpgrade python2-debuginfoUpgrade python2-debugUpgrade python2-tkinterUpgrade python2-pluggyUpgrade resource-agents-pafUpgrade python3-wheel-wheelUpgrade PyYAML-debugsourceUpgrade python2-setuptools-wheelUpgrade python2-pyyaml-debuginfoUpgrade python2-pyUpgrade python2-backports-ssl_match_hostnameUpgrade resource-agents-aliyunUpgrade python3-pymongoUpgrade python3-pygmentsUpgrade python-psycopg2-debuginfoUpgrade python2-wheel-wheelUpgrade python2-lxml-debuginfoUpgrade python3-virtualenvUpgrade python2-scipy-debuginfoUpgrade python2-setuptoolsUpgrade python2-sixUpgrade python-pymongo-debugsourceUpgrade python-lxml-debugsourceUpgrade python2-idnaUpgrade python2-urllib3Upgrade python3-sqlalchemyUpgrade python2-pipUpgrade resource-agentsUpgrade python-nose-docsUpgrade python2-pytzUpgrade python2-psycopg2-debuginfoUpgrade python2-babelUpgrade python36-debugUpgrade python2-jinja2Upgrade python2-backportsUpgrade python-psycopg2-docUpgrade python2-pyyamlUpgrade numpy-debugsourceUpgrade python3-bsonUpgrade python2-numpyUpgrade python2-numpy-f2pyUpgrade python2-pip-wheelUpgrade python2-Cython-debuginfoUpgrade python2-docs-infoUpgrade python2-coverage-debuginfoUpgrade python2-chardetUpgrade resource-agents-gcp | Nov 10, 2021 | Mar 23, 2021 |
| Rocky_linux | — | Upgrade python-pymongo-debugsourceUpgrade python3-bsonUpgrade python3-pymongoUpgrade Cython-debugsourceUpgrade python2-psycopg2Upgrade resource-agents-aliyunUpgrade python-psycopg2-docUpgrade python2-pymongoUpgrade python-psycopg2-debugsourceUpgrade scipy-debugsourceUpgrade python2-numpy-f2pyUpgrade python3-sqlalchemyUpgrade resource-agents-pafUpgrade resource-agents-gcpUpgrade python2-pyyamlUpgrade python2-coverage-debuginfoUpgrade resource-agentsUpgrade python3-pymongo-debuginfoUpgrade python2-markupsafeUpgrade python2-lxmlUpgrade python2-lxml-debuginfoUpgrade python3-bson-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-bsonUpgrade resource-agents-debuginfoUpgrade python3-scipyUpgrade python2-psycopg2-testsUpgrade python36-develUpgrade python-coverage-debugsourceUpgrade resource-agents-debugsourceUpgrade python-lxml-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python36Upgrade python2-testUpgrade python2Upgrade python2-backportsUpgrade python2-libsUpgrade python3-pymongo-gridfsUpgrade python-psycopg2-debuginfoUpgrade python2-Cython-debuginfoUpgrade python36-debugUpgrade resource-agents-aliyun-debuginfoUpgrade python2-coverageUpgrade python2-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-pymongo-debuginfoUpgrade python2-debugsourceUpgrade python2-numpy-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python3-scipy-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-bson-debuginfoUpgrade python2-toolsUpgrade python2-scipyUpgrade python2-develUpgrade python2-CythonUpgrade PyYAML-debugsourceUpgrade python2-sqlalchemyUpgrade python2-numpy | Mar 12, 2024 | Mar 23, 2021 |
| Suse | — | Upgrade python2-pygmentsUpgrade python3-pygments | May 5, 2021 | Mar 22, 2021 |
| Ubuntu | — | Upgrade python-pygmentsUpgrade python3-pygments (Ubuntu Pro)Upgrade python-pygments (Ubuntu Pro)Upgrade python3-pygments | Mar 23, 2021 | Mar 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub