An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-virtualenvUpgrade python3-pygmentsUpgrade python2-babelUpgrade python3-pymongoUpgrade python2-noseUpgrade python2-psycopg2Upgrade python2-pymongoUpgrade python2-PyMySQLUpgrade python2-wheel-wheelUpgrade python2-requestsUpgrade resource-agents-aliyunUpgrade resource-agents-gcpUpgrade python2-pytest-mockUpgrade python36Upgrade python2-setuptoolsUpgrade python2-psycopg2-testsUpgrade python2-chardetUpgrade python2-idnaUpgrade python3-sqlalchemyUpgrade python2-setuptools_scmUpgrade python2-funcsigsUpgrade python-sqlalchemy-docUpgrade python-pymongo-docUpgrade python2-pyyamlUpgrade resource-agents-pafUpgrade python2-markupsafeUpgrade python2-urllib3Upgrade python3-docsUpgrade python2-jinja2Upgrade python2-scipyUpgrade python2-numpy-docUpgrade python2-sqlalchemyUpgrade babelUpgrade python2-pygmentsUpgrade python3-bsonUpgrade python2-pluggyUpgrade python2-docsUpgrade python3-wheel-wheelUpgrade python3-scipyUpgrade python2-ipaddressUpgrade python3-pymongo-gridfsUpgrade python2-backports-ssl_match_hostnameUpgrade python-psycopg2-docUpgrade resource-agentsUpgrade python-nose-docsUpgrade python2-coverageUpgrade python2-sixUpgrade python3-wheelUpgrade python2-pysocksUpgrade python36-develUpgrade python3-docutilsUpgrade python2-numpy-f2pyUpgrade python2-backportsUpgrade python2-pytestUpgrade python36-rpm-macrosUpgrade python2-numpyUpgrade python-virtualenv-docUpgrade python3-virtualenvUpgrade python2-CythonUpgrade python2-dnsUpgrade python2-docs-infoUpgrade python3-distroUpgrade python36-debugUpgrade python3-noseUpgrade python2-mockUpgrade python2-setuptools-wheelUpgrade python2-wheelUpgrade python2-pytzUpgrade python2-pyUpgrade python3-PyMySQLUpgrade python2-pymongo-gridfsUpgrade python2-bsonUpgrade python2-attrsUpgrade python2-psycopg2-debugUpgrade python2-rpm-macrosUpgrade python2-docutils | May 4, 2022 | Mar 23, 2021 |
| Alpine Linux | — | Upgrade py3-pygments | Aug 22, 2024 | Mar 23, 2021 |
| Centos_linux | — | Upgrade python3-wheelUpgrade python2-pymongo-debuginfoUpgrade python3-scipy-debuginfoUpgrade python2Upgrade python2-bsonUpgrade python2-debuginfoUpgrade python2-pygmentsUpgrade python2-sixUpgrade python3-noseUpgrade python2-pytzUpgrade python3-pymongoUpgrade python2-docs-infoUpgrade python2-requestsUpgrade python2-numpy-f2pyUpgrade PyYAML-debugsourceUpgrade python2-jinja2Upgrade python-virtualenv-docUpgrade python2-develUpgrade python3-distroUpgrade python3-PyMySQLUpgrade python2-backportsUpgrade python2-libsUpgrade python2-sqlalchemyUpgrade resource-agents-gcpUpgrade python2-testUpgrade python2-pytestUpgrade python2-coverage-debuginfoUpgrade python36Upgrade python2-virtualenvUpgrade python-pymongo-debugsourceUpgrade python3-pymongo-debuginfoUpgrade python2-wheelUpgrade python3-virtualenvUpgrade python2-urllib3Upgrade python36-rpm-macrosUpgrade python2-Cython-debuginfoUpgrade resource-agents-debugsourceUpgrade python2-numpyUpgrade python2-pysocksUpgrade python2-pyUpgrade python2-dnsUpgrade python2-markupsafeUpgrade python2-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python36-debugUpgrade python2-psycopg2-debugUpgrade python36-develUpgrade python2-mockUpgrade numpy-debugsourceUpgrade resource-agents-aliyun-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-pip-wheelUpgrade python2-CythonUpgrade python2-funcsigsUpgrade python2-psycopg2-debuginfoUpgrade python2-pipUpgrade python2-pymongo-gridfsUpgrade python2-setuptools_scmUpgrade python2-attrsUpgrade python2-pymongoUpgrade python3-docutilsUpgrade python2-toolsUpgrade python-pymongo-debuginfoUpgrade python3-sqlalchemyUpgrade python-nose-docsUpgrade python2-scipy-debuginfoUpgrade python2-rpm-macrosUpgrade python2-numpy-docUpgrade python2-lxml-debuginfoUpgrade resource-agents-pafUpgrade babelUpgrade python3-pymongo-gridfsUpgrade python2-wheel-wheelUpgrade python2-setuptools-wheelUpgrade python2-pyyaml-debuginfoUpgrade python2-lxmlUpgrade python2-numpy-debuginfoUpgrade python2-docsUpgrade python2-babelUpgrade python-lxml-debugsourceUpgrade python2-psycopg2-testsUpgrade python2-ipaddressUpgrade python-psycopg2-debugsourceUpgrade python3-bsonUpgrade python-psycopg2-docUpgrade python2-psycopg2Upgrade python2-backports-ssl_match_hostnameUpgrade resource-agentsUpgrade Cython-debugsourceUpgrade python2-pytest-mockUpgrade python2-debugUpgrade python3-pygmentsUpgrade python2-setuptoolsUpgrade python3-scipyUpgrade python3-docsUpgrade python3-bson-debuginfoUpgrade python2-tkinterUpgrade python2-scipyUpgrade python2-noseUpgrade python2-idnaUpgrade python2-coverageUpgrade python2-chardetUpgrade python-pymongo-docUpgrade scipy-debugsourceUpgrade resource-agents-debuginfoUpgrade python3-wheel-wheelUpgrade resource-agents-aliyunUpgrade python-psycopg2-debuginfoUpgrade python2-pluggyUpgrade python2-PyMySQLUpgrade python2-pyyamlUpgrade python2-docutilsUpgrade python-sqlalchemy-docUpgrade python2-bson-debuginfo | Nov 10, 2021 | Mar 23, 2021 |
| Debian | — | Upgrade pygmentsUpgrade mediawiki | Mar 15, 2021 | Mar 15, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade py39-pygmentsUpgrade py38-pygmentsUpgrade py310-pygments-25Upgrade py310-pygmentsUpgrade py38-pygments-25Upgrade py311-pygments-25Upgrade py37-pygments-25Upgrade py37-pygmentsUpgrade py39-pygments-25Upgrade py311-pygments | Sep 1, 2023 | Aug 31, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pygments | Sep 16, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-pygmentsUpgrade python3-pygments | May 18, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-pygmentsUpgrade python-pygments-help | Jul 2, 2021 | Mar 23, 2021 |
| Oracle Solaris | — | Upgrade library/python/pygments-27 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-37 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-39 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 23, 2021 |
| Oracle_linux | — | Upgrade python2-babelUpgrade python2-wheel-wheelUpgrade python-pymongo-docUpgrade python3-docsUpgrade python2-toolsUpgrade python2-pyyamlUpgrade python2-tkinterUpgrade python2-scipyUpgrade python2-debugUpgrade python2-setuptoolsUpgrade python3-docutilsUpgrade python-nose-docsUpgrade python2-ipaddressUpgrade python2-docsUpgrade python2-setuptools-wheelUpgrade python2-psycopg2-testsUpgrade python3-bsonUpgrade python2-pytest-mockUpgrade python2-sqlalchemyUpgrade python3-pygmentsUpgrade python2-chardetUpgrade python2-psycopg2Upgrade python-sqlalchemy-docUpgrade python3-scipyUpgrade python2-lxmlUpgrade python3-sqlalchemyUpgrade python3-wheel-wheelUpgrade python2-pluggyUpgrade python2-noseUpgrade python36Upgrade python2-idnaUpgrade resource-agentsUpgrade python2-pymongoUpgrade python3-pymongo-gridfsUpgrade python2-numpy-docUpgrade python2-PyMySQLUpgrade python2-develUpgrade python2-coverageUpgrade python3-distroUpgrade python36-debugUpgrade python2-pytzUpgrade python2-setuptools_scmUpgrade python2-urllib3Upgrade python2-backports-ssl_match_hostnameUpgrade python2-pygmentsUpgrade python36-rpm-macrosUpgrade python2-pyUpgrade python2-numpyUpgrade python2-wheelUpgrade python2-funcsigsUpgrade python2-docs-infoUpgrade python2-backportsUpgrade python2-requestsUpgrade python2-pytestUpgrade python2-psycopg2-debugUpgrade python2-sixUpgrade python2-numpy-f2pyUpgrade python2-mockUpgrade python2-docutilsUpgrade python2-dnsUpgrade python3-pymongoUpgrade python3-wheelUpgrade python2-jinja2Upgrade babelUpgrade python-virtualenv-docUpgrade python3-virtualenvUpgrade python3-PyMySQLUpgrade python2-pysocksUpgrade python2-CythonUpgrade python36-develUpgrade python2-markupsafeUpgrade python2-pipUpgrade python2-pip-wheelUpgrade python3-noseUpgrade python2-pymongo-gridfsUpgrade python2-bsonUpgrade python-psycopg2-docUpgrade python2-libsUpgrade python2-attrsUpgrade python2Upgrade python2-testUpgrade python2-rpm-macrosUpgrade python2-virtualenv | Nov 19, 2021 | Dec 10, 2020 |
| Redhat_linux | — | Upgrade python2-sixUpgrade PyYAML-debugsourceUpgrade python2-chardetUpgrade python2-backportsUpgrade python2-scipy-debuginfoUpgrade python2-pluggyUpgrade python3-sqlalchemyUpgrade resource-agents-gcpUpgrade resource-agents-pafUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-docUpgrade python2-babelUpgrade python3-pygmentsUpgrade python2-wheel-wheelUpgrade python-psycopg2-debuginfoUpgrade python2-urllib3Upgrade python2-pyUpgrade python2-pipUpgrade python2-lxml-debuginfoUpgrade python-lxml-debugsourceUpgrade python2-jinja2Upgrade python3-bsonUpgrade python36-debugUpgrade python2-psycopg2-debuginfoUpgrade python2-pytzUpgrade numpy-debugsourceUpgrade python3-pymongoUpgrade python3-virtualenvUpgrade python3-wheel-wheelUpgrade python2-setuptoolsUpgrade resource-agents-aliyunUpgrade python2-numpyUpgrade python2-setuptools-wheelUpgrade python-pymongo-debugsourceUpgrade resource-agentsUpgrade python2-pip-wheelUpgrade python2-Cython-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-docs-infoUpgrade python2-backports-ssl_match_hostnameUpgrade python2-idnaUpgrade python2-coverage-debuginfoUpgrade python-nose-docsUpgrade python2-pyyamlUpgrade python2-psycopg2Upgrade python2-noseUpgrade python2-debugsourceUpgrade python3-scipy-debuginfoUpgrade python2-coverageUpgrade python2-pytestUpgrade python-pymongo-docUpgrade python2-libsUpgrade python-coverage-debugsourceUpgrade python2-wheelUpgrade python36-develUpgrade python2-virtualenvUpgrade python3-docsUpgrade python-pymongo-debuginfoUpgrade python2-testUpgrade python3-pymongo-gridfsUpgrade python2-ipaddressUpgrade python2-CythonUpgrade python2-debugUpgrade python2-debuginfoUpgrade python3-scipyUpgrade python2-toolsUpgrade python2-tkinterUpgrade python3-docutilsUpgrade python2-markupsafeUpgrade python2-scipyUpgrade python2-pymongoUpgrade python2Upgrade python2-bson-debuginfoUpgrade Cython-debugsourceUpgrade python2-mockUpgrade python2-setuptools_scmUpgrade python2-psycopg2-testsUpgrade resource-agents-aliyun-debuginfoUpgrade python2-requestsUpgrade python2-bsonUpgrade python36-rpm-macrosUpgrade python2-pymongo-gridfsUpgrade python2-dnsUpgrade python-virtualenv-docUpgrade python2-funcsigsUpgrade python2-develUpgrade resource-agents-debuginfoUpgrade python2-docutilsUpgrade python2-PyMySQLUpgrade python3-wheelUpgrade python2-attrsUpgrade resource-agents-debugsourceUpgrade python3-distroUpgrade python-sqlalchemy-docUpgrade python2-docsUpgrade babelNo solution existsUpgrade python2-pysocksUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-lxmlUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2-debugUpgrade scipy-debugsourceUpgrade python2-pygmentsUpgrade python3-noseUpgrade python3-PyMySQLUpgrade python2-pymongo-debuginfoUpgrade python2-rpm-macrosUpgrade python2-numpy-docUpgrade python3-bson-debuginfoUpgrade python2-sqlalchemyUpgrade python3-pymongo-debuginfoUpgrade python2-pytest-mockUpgrade python36Upgrade python2-numpy-debuginfo | Nov 10, 2021 | Mar 23, 2021 |
| Rocky_linux | — | Upgrade python36-develUpgrade numpy-debugsourceUpgrade python2-tkinterUpgrade python3-bson-debuginfoUpgrade python2-bsonUpgrade python2-debugUpgrade resource-agents-pafUpgrade python2-coverage-debuginfoUpgrade resource-agents-gcpUpgrade python2-psycopg2-testsUpgrade python2-pyyamlUpgrade python2-lxml-debuginfoUpgrade python2-lxmlUpgrade python2-markupsafeUpgrade python-pymongo-debuginfoUpgrade python3-pymongo-debuginfoUpgrade resource-agents-aliyunUpgrade python2-psycopg2Upgrade python3-bsonUpgrade python3-pymongoUpgrade python3-sqlalchemyUpgrade Cython-debugsourceUpgrade python2-numpy-f2pyUpgrade python3-scipyUpgrade python2-pymongoUpgrade python-pymongo-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade resource-agentsUpgrade python-psycopg2-debugsourceUpgrade resource-agents-debuginfoUpgrade scipy-debugsourceUpgrade python-psycopg2-docUpgrade resource-agents-debugsourceUpgrade python2Upgrade python36Upgrade python2-libsUpgrade python2-backportsUpgrade python2-numpy-debuginfoUpgrade python2-bson-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-numpyUpgrade python2-psycopg2-debug-debuginfoUpgrade python3-pymongo-gridfsUpgrade python36-debugUpgrade python2-coverageUpgrade resource-agents-aliyun-debuginfoUpgrade python3-scipy-debuginfoUpgrade python2-develUpgrade python2-pymongo-debuginfoUpgrade python2-debuginfoUpgrade python2-scipyUpgrade PyYAML-debugsourceUpgrade python2-debugsourceUpgrade python2-toolsUpgrade python2-psycopg2-debugUpgrade python2-CythonUpgrade python2-Cython-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-sqlalchemyUpgrade python2-testUpgrade python-lxml-debugsourceUpgrade python-coverage-debugsource | Mar 12, 2024 | Mar 23, 2021 |
| Suse | — | Upgrade python2-pygmentsUpgrade python3-pygments | May 5, 2021 | Mar 22, 2021 |
| Ubuntu | — | Upgrade python3-pygments (Ubuntu Pro)Upgrade python-pygments (Ubuntu Pro)Upgrade python3-pygmentsUpgrade python-pygments | Mar 23, 2021 | Mar 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub