An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-docutilsUpgrade python3-distroUpgrade python3-PyMySQLUpgrade python2-coverageUpgrade resource-agentsUpgrade python2-numpy-f2pyUpgrade python36-develUpgrade python2-pytzUpgrade python2-docutilsUpgrade python2-docs-infoUpgrade python2-rpm-macrosUpgrade python3-virtualenvUpgrade python2-mockUpgrade python2-pysocksUpgrade python-nose-docsUpgrade python36-debugUpgrade python2-numpyUpgrade python2-dnsUpgrade python-psycopg2-docUpgrade python2-setuptools-wheelUpgrade python2-backportsUpgrade python3-noseUpgrade python2-pytestUpgrade python-virtualenv-docUpgrade python2-attrsUpgrade python2-CythonUpgrade python2-pymongo-gridfsUpgrade python36-rpm-macrosUpgrade python2-bsonUpgrade python2-wheelUpgrade python3-wheelUpgrade python2-sixUpgrade python2-psycopg2-debugUpgrade python2-backports-ssl_match_hostnameUpgrade python3-pymongo-gridfsUpgrade python2-pyUpgrade python2-ipaddressUpgrade python3-scipyUpgrade python3-pygmentsUpgrade python2-requestsUpgrade python2-pymongoUpgrade resource-agents-aliyunUpgrade python3-pymongoUpgrade python2-numpy-docUpgrade python2-markupsafeUpgrade python2-jinja2Upgrade python2-PyMySQLUpgrade python2-pyyamlUpgrade python2-psycopg2-testsUpgrade python-sqlalchemy-docUpgrade python2-setuptoolsUpgrade python2-virtualenvUpgrade python2-sqlalchemyUpgrade babelUpgrade resource-agents-pafUpgrade python2-wheel-wheelUpgrade python2-babelUpgrade python2-scipyUpgrade python2-pygmentsUpgrade python-pymongo-docUpgrade python2-setuptools_scmUpgrade python2-pytest-mockUpgrade python2-funcsigsUpgrade python36Upgrade python2-noseUpgrade python2-pluggyUpgrade python2-docsUpgrade python2-chardetUpgrade resource-agents-gcpUpgrade python3-wheel-wheelUpgrade python2-idnaUpgrade python3-docsUpgrade python3-sqlalchemyUpgrade python3-bsonUpgrade python2-psycopg2Upgrade python2-urllib3 | May 4, 2022 | Mar 23, 2021 |
| Alpine Linux | — | Upgrade py3-pygments | Aug 22, 2024 | Mar 23, 2021 |
| Centos_linux | — | Upgrade python2-pysocksUpgrade python2-numpyUpgrade python2-numpy-f2pyUpgrade python2-sixUpgrade python-coverage-debugsourceUpgrade python2-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-setuptools_scmUpgrade python2-psycopg2-debuginfoUpgrade python2-attrsUpgrade python3-scipy-debuginfoUpgrade numpy-debugsourceUpgrade python2-funcsigsUpgrade python2-dnsUpgrade python2-libsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-markupsafeUpgrade python2-pyUpgrade python3-pymongo-debuginfoUpgrade resource-agents-debugsourceUpgrade python-pymongo-debugsourceUpgrade python2-Cython-debuginfoUpgrade python2-CythonUpgrade python2Upgrade python36Upgrade python2-pip-wheelUpgrade python36-develUpgrade python2-urllib3Upgrade python2-docs-infoUpgrade python2-pygmentsUpgrade python36-debugUpgrade python36-rpm-macrosUpgrade python2-bsonUpgrade python3-noseUpgrade python2-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python3-pymongoUpgrade PyYAML-debugsourceUpgrade python2-requestsUpgrade python2-jinja2Upgrade python3-wheelUpgrade python2-virtualenvUpgrade python2-wheelUpgrade python3-virtualenvUpgrade python2-pytzUpgrade python3-distroUpgrade python-virtualenv-docUpgrade python2-backportsUpgrade resource-agents-gcpUpgrade python2-sqlalchemyUpgrade python3-PyMySQLUpgrade python2-testUpgrade python2-coverage-debuginfoUpgrade python2-develUpgrade python2-pytestUpgrade python2-psycopg2-debugUpgrade python2-pipUpgrade python2-mockUpgrade resource-agents-aliyun-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-docsUpgrade python3-docutilsUpgrade python-pymongo-docUpgrade python3-scipyUpgrade python3-pygmentsUpgrade python3-docsUpgrade python2-tkinterUpgrade python2-psycopg2Upgrade python-psycopg2-docUpgrade python2-backports-ssl_match_hostnameUpgrade scipy-debugsourceUpgrade python2-pluggyUpgrade python-nose-docsUpgrade python2-numpy-docUpgrade python2-lxml-debuginfoUpgrade resource-agents-aliyunUpgrade python3-wheel-wheelUpgrade python2-toolsUpgrade python2-pytest-mockUpgrade python2-debugUpgrade resource-agents-debuginfoUpgrade python2-wheel-wheelUpgrade python3-bson-debuginfoUpgrade python2-lxmlUpgrade babelUpgrade python3-pymongo-gridfsUpgrade python2-setuptools-wheelUpgrade python2-psycopg2-testsUpgrade python2-ipaddressUpgrade python-psycopg2-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python3-bsonUpgrade python2-PyMySQLUpgrade resource-agents-pafUpgrade python2-rpm-macrosUpgrade python2-scipy-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python-lxml-debugsourceUpgrade Cython-debugsourceUpgrade python2-pyyamlUpgrade python2-docutilsUpgrade python-sqlalchemy-docUpgrade python2-bson-debuginfoUpgrade python-pymongo-debuginfoUpgrade python3-sqlalchemyUpgrade resource-agentsUpgrade python2-pymongoUpgrade python2-babelUpgrade python2-idnaUpgrade python2-setuptoolsUpgrade python2-scipyUpgrade python2-noseUpgrade python2-coverageUpgrade python2-chardet | Nov 10, 2021 | Mar 23, 2021 |
| Debian | — | Upgrade mediawikiUpgrade pygments | Mar 15, 2021 | Mar 15, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade py310-pygments-25Upgrade py38-pygments-25Upgrade py39-pygmentsUpgrade py37-pygments-25Upgrade py311-pygments-25Upgrade py310-pygmentsUpgrade py38-pygmentsUpgrade py39-pygments-25Upgrade py311-pygmentsUpgrade py37-pygments | Sep 1, 2023 | Aug 31, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pygments | Sep 16, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-pygmentsUpgrade python3-pygments | May 18, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-pygmentsUpgrade python-pygments-help | Jul 2, 2021 | Mar 23, 2021 |
| Oracle Solaris | — | Upgrade library/python/pygments-39 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-37 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-27 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 23, 2021 |
| Oracle_linux | — | Upgrade python2-chardetUpgrade python2-setuptoolsUpgrade python36Upgrade python2-pytest-mockUpgrade python2-PyMySQLUpgrade python2-sqlalchemyUpgrade python2-pymongoUpgrade python-sqlalchemy-docUpgrade python2-numpy-docUpgrade python3-pygmentsUpgrade resource-agentsUpgrade python3-sqlalchemyUpgrade python2-lxmlUpgrade python3-wheel-wheelUpgrade python-nose-docsUpgrade python2-docsUpgrade python2-develUpgrade python2-debugUpgrade python3-docsUpgrade python-pymongo-docUpgrade python2-ipaddressUpgrade python3-scipyUpgrade python2-babelUpgrade python2-toolsUpgrade python2-psycopg2Upgrade python2-scipyUpgrade python2-tkinterUpgrade python2-idnaUpgrade python2-psycopg2-testsUpgrade python3-bsonUpgrade python2-pyyamlUpgrade python3-docutilsUpgrade python2-pluggyUpgrade python3-pymongo-gridfsUpgrade python2-wheel-wheelUpgrade python2-noseUpgrade python2-coverageUpgrade python2-setuptools-wheelUpgrade python2-virtualenvUpgrade python2-psycopg2-debugUpgrade python2-numpy-f2pyUpgrade python2-libsUpgrade python2-backportsUpgrade python2Upgrade python3-wheelUpgrade python2-pytestUpgrade python2-dnsUpgrade python2-docutilsUpgrade python2-mockUpgrade python2-pymongo-gridfsUpgrade python2-bsonUpgrade python-psycopg2-docUpgrade python3-noseUpgrade python2-pygmentsUpgrade python2-pyUpgrade python2-numpyUpgrade python36-rpm-macrosUpgrade python36-debugUpgrade python3-distroUpgrade python2-setuptools_scmUpgrade python2-requestsUpgrade python36-develUpgrade python3-PyMySQLUpgrade python2-pysocksUpgrade python2-markupsafeUpgrade python2-CythonUpgrade python-virtualenv-docUpgrade babelUpgrade python3-virtualenvUpgrade python2-rpm-macrosUpgrade python2-testUpgrade python2-jinja2Upgrade python2-backports-ssl_match_hostnameUpgrade python2-wheelUpgrade python2-urllib3Upgrade python2-pytzUpgrade python3-pymongoUpgrade python2-sixUpgrade python2-pipUpgrade python2-pip-wheelUpgrade python2-attrsUpgrade python2-docs-infoUpgrade python2-funcsigs | Nov 19, 2021 | Dec 10, 2020 |
| Redhat_linux | — | Upgrade python2-debugUpgrade python2-virtualenvUpgrade python2-funcsigsUpgrade python2-bsonUpgrade python-virtualenv-docUpgrade resource-agents-aliyun-debuginfoUpgrade python2-debuginfoUpgrade Cython-debugsourceUpgrade python2-noseUpgrade python2-dnsUpgrade python2-CythonUpgrade python2Upgrade python2-pymongoUpgrade python2-ipaddressUpgrade python2-lxmlUpgrade python2-attrsUpgrade python2-develUpgrade python2-pymongo-gridfsUpgrade python2-numpy-debuginfoUpgrade python2-rpm-macrosUpgrade python2-pytest-mockUpgrade python2-setuptools_scmUpgrade python2-pysocksUpgrade python3-scipy-debuginfoUpgrade python3-PyMySQLUpgrade python2-docsUpgrade scipy-debugsourceUpgrade python2-psycopg2-testsUpgrade python2-docutilsUpgrade python2-psycopg2-debug-debuginfoNo solution existsUpgrade resource-agents-debuginfoUpgrade python2-requestsUpgrade python2-pygmentsUpgrade python2-sqlalchemyUpgrade python2-wheelUpgrade python2-scipyUpgrade python3-docsUpgrade python-pymongo-debuginfoUpgrade python3-bson-debuginfoUpgrade python-sqlalchemy-docUpgrade python2-psycopg2Upgrade babelUpgrade python2-pytestUpgrade python36-rpm-macrosUpgrade python2-libsUpgrade python2-numpy-docUpgrade python36Upgrade python2-markupsafeUpgrade python3-noseUpgrade python2-bson-debuginfoUpgrade python3-pymongo-debuginfoUpgrade python2-coverageUpgrade python2-tkinterUpgrade python2-testUpgrade python2-pymongo-debuginfoUpgrade python36-develUpgrade python-coverage-debugsourceUpgrade python3-pymongo-gridfsUpgrade python2-toolsUpgrade python3-scipyUpgrade python-pymongo-docUpgrade resource-agents-debugsourceUpgrade python2-debugsourceUpgrade python3-wheelUpgrade python3-docutilsUpgrade python2-mockUpgrade python2-PyMySQLUpgrade python3-distroUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2-debugUpgrade python3-pygmentsUpgrade python3-wheel-wheelUpgrade python2-Cython-debuginfoUpgrade python2-docs-infoUpgrade python2-idnaUpgrade python3-pymongoUpgrade python2-numpy-f2pyUpgrade python-psycopg2-debuginfoUpgrade python2-pip-wheelUpgrade python2-lxml-debuginfoUpgrade python2-wheel-wheelUpgrade python2-setuptools-wheelUpgrade python2-scipy-debuginfoUpgrade numpy-debugsourceUpgrade python2-urllib3Upgrade python2-psycopg2-debuginfoUpgrade python2-setuptoolsUpgrade python2-babelUpgrade python2-chardetUpgrade resource-agents-gcpUpgrade resource-agents-aliyunUpgrade python3-sqlalchemyUpgrade python2-pluggyUpgrade resource-agents-pafUpgrade python2-pyyamlUpgrade python36-debugUpgrade python2-pipUpgrade python-nose-docsUpgrade python2-coverage-debuginfoUpgrade python2-pytzUpgrade python3-virtualenvUpgrade python2-pyUpgrade python2-backports-ssl_match_hostnameUpgrade python3-bsonUpgrade python2-pyyaml-debuginfoUpgrade python2-sixUpgrade python2-backportsUpgrade PyYAML-debugsourceUpgrade resource-agentsUpgrade python-pymongo-debugsourceUpgrade python-lxml-debugsourceUpgrade python-psycopg2-docUpgrade python2-jinja2Upgrade python2-numpy | Nov 10, 2021 | Mar 23, 2021 |
| Rocky_linux | — | Upgrade python2-psycopg2-debuginfoUpgrade python36-develUpgrade python-psycopg2-docUpgrade python2-lxmlUpgrade python2-markupsafeUpgrade python3-sqlalchemyUpgrade resource-agents-debuginfoUpgrade python2-pymongoUpgrade python2-coverage-debuginfoUpgrade python2-debugUpgrade numpy-debugsourceUpgrade python2-tkinterUpgrade python2-bsonUpgrade resource-agentsUpgrade python3-pymongo-debuginfoUpgrade resource-agents-gcpUpgrade python3-bson-debuginfoUpgrade python2-pyyamlUpgrade scipy-debugsourceUpgrade python2-lxml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2-testsUpgrade python3-scipyUpgrade resource-agents-pafUpgrade python2-numpy-f2pyUpgrade resource-agents-aliyunUpgrade python3-pymongoUpgrade Cython-debugsourceUpgrade python3-bsonUpgrade python2-psycopg2Upgrade python-pymongo-debugsourceUpgrade python-pymongo-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-pymongo-gridfsUpgrade python3-pymongo-gridfsUpgrade python2-backportsUpgrade python2-scipyUpgrade python2-develUpgrade python2-CythonUpgrade python-psycopg2-debuginfoUpgrade python2-Cython-debuginfoUpgrade python2-toolsUpgrade resource-agents-aliyun-debuginfoUpgrade python36-debugUpgrade python2-coverageUpgrade python-lxml-debugsourceUpgrade python-coverage-debugsourceUpgrade resource-agents-debugsourceUpgrade python2-sqlalchemyUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-numpyUpgrade python2-bson-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2Upgrade python36Upgrade python2-pyyaml-debuginfoUpgrade python2-testUpgrade python2-debuginfoUpgrade python3-scipy-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-debugsourceUpgrade python2-libs | Mar 12, 2024 | Mar 23, 2021 |
| Suse | — | Upgrade python2-pygmentsUpgrade python3-pygments | May 5, 2021 | Mar 22, 2021 |
| Ubuntu | — | Upgrade python-pygments (Ubuntu Pro)Upgrade python3-pygments (Ubuntu Pro)Upgrade python3-pygmentsUpgrade python-pygments | Mar 23, 2021 | Mar 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub