In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-babelalma-upgrade-python-nose-docsalma-upgrade-python-psycopg2-docalma-upgrade-python-pymongo-docalma-upgrade-python-sqlalchemy-docalma-upgrade-python-virtualenv-docalma-upgrade-python2-attrsalma-upgrade-python2-babelalma-upgrade-python2-backportsalma-upgrade-python2-backports-ssl_match_hostnamealma-upgrade-python2-bsonalma-upgrade-python2-chardetalma-upgrade-python2-coveragealma-upgrade-python2-cythonalma-upgrade-python2-dnsalma-upgrade-python2-docsalma-upgrade-python2-docs-infoalma-upgrade-python2-docutilsalma-upgrade-python2-funcsigsalma-upgrade-python2-idnaalma-upgrade-python2-ipaddressalma-upgrade-python2-jinja2alma-upgrade-python2-markupsafealma-upgrade-python2-mockalma-upgrade-python2-nosealma-upgrade-python2-numpyalma-upgrade-python2-numpy-docalma-upgrade-python2-numpy-f2pyalma-upgrade-python2-pluggyalma-upgrade-python2-psycopg2alma-upgrade-python2-psycopg2-debugalma-upgrade-python2-psycopg2-testsalma-upgrade-python2-pyalma-upgrade-python2-pygmentsalma-upgrade-python2-pymongoalma-upgrade-python2-pymongo-gridfsalma-upgrade-python2-pymysqlalma-upgrade-python2-pysocksalma-upgrade-python2-pytestalma-upgrade-python2-pytest-mockalma-upgrade-python2-pytzalma-upgrade-python2-pyyamlalma-upgrade-python2-requestsalma-upgrade-python2-rpm-macrosalma-upgrade-python2-scipyalma-upgrade-python2-setuptoolsalma-upgrade-python2-setuptools-wheelalma-upgrade-python2-setuptools_scmalma-upgrade-python2-sixalma-upgrade-python2-sqlalchemyalma-upgrade-python2-urllib3alma-upgrade-python2-virtualenvalma-upgrade-python2-wheelalma-upgrade-python2-wheel-wheelalma-upgrade-python3-bsonalma-upgrade-python3-distroalma-upgrade-python3-docsalma-upgrade-python3-docutilsalma-upgrade-python3-nosealma-upgrade-python3-pygmentsalma-upgrade-python3-pymongoalma-upgrade-python3-pymongo-gridfsalma-upgrade-python3-pymysqlalma-upgrade-python3-scipyalma-upgrade-python3-sqlalchemyalma-upgrade-python3-virtualenvalma-upgrade-python3-wheelalma-upgrade-python3-wheel-wheelalma-upgrade-python36alma-upgrade-python36-debugalma-upgrade-python36-develalma-upgrade-python36-rpm-macrosalma-upgrade-resource-agentsalma-upgrade-resource-agents-aliyunalma-upgrade-resource-agents-gcpalma-upgrade-resource-agents-paf | May 4, 2022 | Mar 17, 2021 | |
| Alpine Linux | alpine-linux-upgrade-py3-pygments | Oct 1, 2024 | Mar 17, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-python-pygmentsamazon-linux-ami-2-upgrade-python3-pygmentsamazon-linux-ami-2-upgrade-python3-pygments-doc | Jul 21, 2023 | Mar 17, 2021 | |
| Centos_linux | — | centos-upgrade-babelcentos-upgrade-cython-debugsourcecentos-upgrade-numpy-debugsourcecentos-upgrade-python-coverage-debugsourcecentos-upgrade-python-lxml-debugsourcecentos-upgrade-python-nose-docscentos-upgrade-python-psycopg2-debuginfocentos-upgrade-python-psycopg2-debugsourcecentos-upgrade-python-psycopg2-doccentos-upgrade-python-pymongo-debuginfocentos-upgrade-python-pymongo-debugsourcecentos-upgrade-python-pymongo-doccentos-upgrade-python-sqlalchemy-doccentos-upgrade-python-virtualenv-doccentos-upgrade-python2centos-upgrade-python2-attrscentos-upgrade-python2-babelcentos-upgrade-python2-backportscentos-upgrade-python2-backports-ssl_match_hostnamecentos-upgrade-python2-bsoncentos-upgrade-python2-bson-debuginfocentos-upgrade-python2-chardetcentos-upgrade-python2-coveragecentos-upgrade-python2-coverage-debuginfocentos-upgrade-python2-cythoncentos-upgrade-python2-cython-debuginfocentos-upgrade-python2-debugcentos-upgrade-python2-debuginfocentos-upgrade-python2-debugsourcecentos-upgrade-python2-develcentos-upgrade-python2-dnscentos-upgrade-python2-docscentos-upgrade-python2-docs-infocentos-upgrade-python2-docutilscentos-upgrade-python2-funcsigscentos-upgrade-python2-idnacentos-upgrade-python2-ipaddresscentos-upgrade-python2-jinja2centos-upgrade-python2-libscentos-upgrade-python2-lxmlcentos-upgrade-python2-lxml-debuginfocentos-upgrade-python2-markupsafecentos-upgrade-python2-mockcentos-upgrade-python2-nosecentos-upgrade-python2-numpycentos-upgrade-python2-numpy-debuginfocentos-upgrade-python2-numpy-doccentos-upgrade-python2-numpy-f2pycentos-upgrade-python2-pipcentos-upgrade-python2-pip-wheelcentos-upgrade-python2-pluggycentos-upgrade-python2-psycopg2centos-upgrade-python2-psycopg2-debugcentos-upgrade-python2-psycopg2-debug-debuginfocentos-upgrade-python2-psycopg2-debuginfocentos-upgrade-python2-psycopg2-testscentos-upgrade-python2-pycentos-upgrade-python2-pygmentscentos-upgrade-python2-pymongocentos-upgrade-python2-pymongo-debuginfocentos-upgrade-python2-pymongo-gridfscentos-upgrade-python2-pymysqlcentos-upgrade-python2-pysockscentos-upgrade-python2-pytestcentos-upgrade-python2-pytest-mockcentos-upgrade-python2-pytzcentos-upgrade-python2-pyyamlcentos-upgrade-python2-pyyaml-debuginfocentos-upgrade-python2-requestscentos-upgrade-python2-rpm-macroscentos-upgrade-python2-scipycentos-upgrade-python2-scipy-debuginfocentos-upgrade-python2-setuptoolscentos-upgrade-python2-setuptools-wheelcentos-upgrade-python2-setuptools_scmcentos-upgrade-python2-sixcentos-upgrade-python2-sqlalchemycentos-upgrade-python2-testcentos-upgrade-python2-tkintercentos-upgrade-python2-toolscentos-upgrade-python2-urllib3centos-upgrade-python2-virtualenvcentos-upgrade-python2-wheelcentos-upgrade-python2-wheel-wheelcentos-upgrade-python3-bsoncentos-upgrade-python3-bson-debuginfocentos-upgrade-python3-distrocentos-upgrade-python3-docscentos-upgrade-python3-docutilscentos-upgrade-python3-nosecentos-upgrade-python3-pygmentscentos-upgrade-python3-pymongocentos-upgrade-python3-pymongo-debuginfocentos-upgrade-python3-pymongo-gridfscentos-upgrade-python3-pymysqlcentos-upgrade-python3-scipycentos-upgrade-python3-scipy-debuginfocentos-upgrade-python3-sqlalchemycentos-upgrade-python3-virtualenvcentos-upgrade-python3-wheelcentos-upgrade-python3-wheel-wheelcentos-upgrade-python36centos-upgrade-python36-debugcentos-upgrade-python36-develcentos-upgrade-python36-rpm-macroscentos-upgrade-pyyaml-debugsourcecentos-upgrade-resource-agentscentos-upgrade-resource-agents-aliyuncentos-upgrade-resource-agents-aliyun-debuginfocentos-upgrade-resource-agents-debuginfocentos-upgrade-resource-agents-debugsourcecentos-upgrade-resource-agents-gcpcentos-upgrade-resource-agents-pafcentos-upgrade-scipy-debugsource | Nov 10, 2021 | Mar 17, 2021 |
| Debian | debian-upgrade-mediawikidebian-upgrade-pygments | Mar 22, 2021 | Mar 17, 2021 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Freebsd | freebsd-upgrade-package-py37-pygmentsfreebsd-upgrade-package-py38-pygmentsfreebsd-upgrade-package-py39-pygmentsfreebsd-upgrade-package-py310-pygmentsfreebsd-upgrade-package-py311-pygmentsfreebsd-upgrade-package-py37-pygments-25freebsd-upgrade-package-py38-pygments-25freebsd-upgrade-package-py39-pygments-25freebsd-upgrade-package-py310-pygments-25freebsd-upgrade-package-py311-pygments-25 | Sep 1, 2023 | Aug 31, 2023 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-python-pygments | Sep 16, 2021 | Mar 17, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-python-pygments | Apr 30, 2021 | Mar 17, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-python-pygments | Jul 19, 2021 | Mar 17, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-python2-pygmentshuawei-euleros-2_0_sp8-upgrade-python3-pygments | May 18, 2021 | Mar 17, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-python-pygments-helphuawei-euleros-2_0_sp9-upgrade-python3-pygments | Jul 2, 2021 | Mar 17, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-python-pygments-2-5-2-11-4-35-0-1-94-2oracle-solaris-11-4-upgrade-library-python-pygments-27-2-5-2-11-4-35-0-1-94-2oracle-solaris-11-4-upgrade-library-python-pygments-37-2-5-2-11-4-35-0-1-94-2oracle-solaris-11-4-upgrade-library-python-pygments-39-2-5-2-11-4-35-0-1-94-2 | Jul 21, 2021 | Mar 17, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-babeloracle-linux-upgrade-python2oracle-linux-upgrade-python2-attrsoracle-linux-upgrade-python2-babeloracle-linux-upgrade-python2-backportsoracle-linux-upgrade-python2-backports-ssl-match-hostnameoracle-linux-upgrade-python2-bsonoracle-linux-upgrade-python2-chardetoracle-linux-upgrade-python2-coverageoracle-linux-upgrade-python2-cythonoracle-linux-upgrade-python2-debugoracle-linux-upgrade-python2-develoracle-linux-upgrade-python2-dnsoracle-linux-upgrade-python2-docsoracle-linux-upgrade-python2-docs-infooracle-linux-upgrade-python2-docutilsoracle-linux-upgrade-python2-funcsigsoracle-linux-upgrade-python2-idnaoracle-linux-upgrade-python2-ipaddressoracle-linux-upgrade-python2-jinja2oracle-linux-upgrade-python2-libsoracle-linux-upgrade-python2-lxmloracle-linux-upgrade-python2-markupsafeoracle-linux-upgrade-python2-mockoracle-linux-upgrade-python2-noseoracle-linux-upgrade-python2-numpyoracle-linux-upgrade-python2-numpy-docoracle-linux-upgrade-python2-numpy-f2pyoracle-linux-upgrade-python2-piporacle-linux-upgrade-python2-pip-wheeloracle-linux-upgrade-python2-pluggyoracle-linux-upgrade-python2-psycopg2oracle-linux-upgrade-python2-psycopg2-debugoracle-linux-upgrade-python2-psycopg2-testsoracle-linux-upgrade-python2-pyoracle-linux-upgrade-python2-pygmentsoracle-linux-upgrade-python2-pymongooracle-linux-upgrade-python2-pymongo-gridfsoracle-linux-upgrade-python2-pymysqloracle-linux-upgrade-python2-pysocksoracle-linux-upgrade-python2-pytestoracle-linux-upgrade-python2-pytest-mockoracle-linux-upgrade-python2-pytzoracle-linux-upgrade-python2-pyyamloracle-linux-upgrade-python2-requestsoracle-linux-upgrade-python2-rpm-macrosoracle-linux-upgrade-python2-scipyoracle-linux-upgrade-python2-setuptoolsoracle-linux-upgrade-python2-setuptools-scmoracle-linux-upgrade-python2-setuptools-wheeloracle-linux-upgrade-python2-sixoracle-linux-upgrade-python2-sqlalchemyoracle-linux-upgrade-python2-testoracle-linux-upgrade-python2-tkinteroracle-linux-upgrade-python2-toolsoracle-linux-upgrade-python2-urllib3oracle-linux-upgrade-python2-virtualenvoracle-linux-upgrade-python2-wheeloracle-linux-upgrade-python2-wheel-wheeloracle-linux-upgrade-python36oracle-linux-upgrade-python36-debugoracle-linux-upgrade-python36-develoracle-linux-upgrade-python36-rpm-macrosoracle-linux-upgrade-python3-bsonoracle-linux-upgrade-python3-distrooracle-linux-upgrade-python3-docsoracle-linux-upgrade-python3-docutilsoracle-linux-upgrade-python3-noseoracle-linux-upgrade-python3-pygmentsoracle-linux-upgrade-python3-pymongooracle-linux-upgrade-python3-pymongo-gridfsoracle-linux-upgrade-python3-pymysqloracle-linux-upgrade-python3-scipyoracle-linux-upgrade-python3-sqlalchemyoracle-linux-upgrade-python3-virtualenvoracle-linux-upgrade-python3-wheeloracle-linux-upgrade-python3-wheel-wheeloracle-linux-upgrade-python-nose-docsoracle-linux-upgrade-python-psycopg2-docoracle-linux-upgrade-python-pymongo-docoracle-linux-upgrade-python-sqlalchemy-docoracle-linux-upgrade-python-virtualenv-docoracle-linux-upgrade-resource-agents | Nov 19, 2021 | Jan 11, 2021 |
| Redhat_linux | redhat-upgrade-babelredhat-upgrade-cython-debugsourceredhat-upgrade-numpy-debugsourceredhat-upgrade-python-coverage-debugsourceredhat-upgrade-python-lxml-debugsourceredhat-upgrade-python-nose-docsredhat-upgrade-python-psycopg2-debuginforedhat-upgrade-python-psycopg2-debugsourceredhat-upgrade-python-psycopg2-docredhat-upgrade-python-pymongo-debuginforedhat-upgrade-python-pymongo-debugsourceredhat-upgrade-python-pymongo-docredhat-upgrade-python-sqlalchemy-docredhat-upgrade-python-virtualenv-docredhat-upgrade-python2redhat-upgrade-python2-attrsredhat-upgrade-python2-babelredhat-upgrade-python2-backportsredhat-upgrade-python2-backports-ssl_match_hostnameredhat-upgrade-python2-bsonredhat-upgrade-python2-bson-debuginforedhat-upgrade-python2-chardetredhat-upgrade-python2-coverageredhat-upgrade-python2-coverage-debuginforedhat-upgrade-python2-cythonredhat-upgrade-python2-cython-debuginforedhat-upgrade-python2-debugredhat-upgrade-python2-debuginforedhat-upgrade-python2-debugsourceredhat-upgrade-python2-develredhat-upgrade-python2-dnsredhat-upgrade-python2-docsredhat-upgrade-python2-docs-inforedhat-upgrade-python2-docutilsredhat-upgrade-python2-funcsigsredhat-upgrade-python2-idnaredhat-upgrade-python2-ipaddressredhat-upgrade-python2-jinja2redhat-upgrade-python2-libsredhat-upgrade-python2-lxmlredhat-upgrade-python2-lxml-debuginforedhat-upgrade-python2-markupsaferedhat-upgrade-python2-mockredhat-upgrade-python2-noseredhat-upgrade-python2-numpyredhat-upgrade-python2-numpy-debuginforedhat-upgrade-python2-numpy-docredhat-upgrade-python2-numpy-f2pyredhat-upgrade-python2-pipredhat-upgrade-python2-pip-wheelredhat-upgrade-python2-pluggyredhat-upgrade-python2-psycopg2redhat-upgrade-python2-psycopg2-debugredhat-upgrade-python2-psycopg2-debug-debuginforedhat-upgrade-python2-psycopg2-debuginforedhat-upgrade-python2-psycopg2-testsredhat-upgrade-python2-pyredhat-upgrade-python2-pygmentsredhat-upgrade-python2-pymongoredhat-upgrade-python2-pymongo-debuginforedhat-upgrade-python2-pymongo-gridfsredhat-upgrade-python2-pymysqlredhat-upgrade-python2-pysocksredhat-upgrade-python2-pytestredhat-upgrade-python2-pytest-mockredhat-upgrade-python2-pytzredhat-upgrade-python2-pyyamlredhat-upgrade-python2-pyyaml-debuginforedhat-upgrade-python2-requestsredhat-upgrade-python2-rpm-macrosredhat-upgrade-python2-scipyredhat-upgrade-python2-scipy-debuginforedhat-upgrade-python2-setuptoolsredhat-upgrade-python2-setuptools-wheelredhat-upgrade-python2-setuptools_scmredhat-upgrade-python2-sixredhat-upgrade-python2-sqlalchemyredhat-upgrade-python2-testredhat-upgrade-python2-tkinterredhat-upgrade-python2-toolsredhat-upgrade-python2-urllib3redhat-upgrade-python2-virtualenvredhat-upgrade-python2-wheelredhat-upgrade-python2-wheel-wheelredhat-upgrade-python3-bsonredhat-upgrade-python3-bson-debuginforedhat-upgrade-python3-distroredhat-upgrade-python3-docsredhat-upgrade-python3-docutilsredhat-upgrade-python3-noseredhat-upgrade-python3-pygmentsredhat-upgrade-python3-pymongoredhat-upgrade-python3-pymongo-debuginforedhat-upgrade-python3-pymongo-gridfsredhat-upgrade-python3-pymysqlredhat-upgrade-python3-scipyredhat-upgrade-python3-scipy-debuginforedhat-upgrade-python3-sqlalchemyredhat-upgrade-python3-virtualenvredhat-upgrade-python3-wheelredhat-upgrade-python3-wheel-wheelredhat-upgrade-python36redhat-upgrade-python36-debugredhat-upgrade-python36-develredhat-upgrade-python36-rpm-macrosredhat-upgrade-pyyaml-debugsourceredhat-upgrade-resource-agentsredhat-upgrade-resource-agents-aliyunredhat-upgrade-resource-agents-aliyun-debuginforedhat-upgrade-resource-agents-debuginforedhat-upgrade-resource-agents-debugsourceredhat-upgrade-resource-agents-gcpredhat-upgrade-resource-agents-pafredhat-upgrade-scipy-debugsource | Nov 10, 2021 | Mar 17, 2021 | |
| Rocky_linux | rocky-upgrade-cython-debugsourcerocky-upgrade-numpy-debugsourcerocky-upgrade-python-coverage-debugsourcerocky-upgrade-python-lxml-debugsourcerocky-upgrade-python-psycopg2-debuginforocky-upgrade-python-psycopg2-debugsourcerocky-upgrade-python-psycopg2-docrocky-upgrade-python-pymongo-debuginforocky-upgrade-python-pymongo-debugsourcerocky-upgrade-python2rocky-upgrade-python2-backportsrocky-upgrade-python2-bsonrocky-upgrade-python2-bson-debuginforocky-upgrade-python2-coveragerocky-upgrade-python2-coverage-debuginforocky-upgrade-python2-cythonrocky-upgrade-python2-cython-debuginforocky-upgrade-python2-debugrocky-upgrade-python2-debuginforocky-upgrade-python2-debugsourcerocky-upgrade-python2-develrocky-upgrade-python2-libsrocky-upgrade-python2-lxmlrocky-upgrade-python2-lxml-debuginforocky-upgrade-python2-markupsaferocky-upgrade-python2-numpyrocky-upgrade-python2-numpy-debuginforocky-upgrade-python2-numpy-f2pyrocky-upgrade-python2-psycopg2rocky-upgrade-python2-psycopg2-debugrocky-upgrade-python2-psycopg2-debug-debuginforocky-upgrade-python2-psycopg2-debuginforocky-upgrade-python2-psycopg2-testsrocky-upgrade-python2-pymongorocky-upgrade-python2-pymongo-debuginforocky-upgrade-python2-pymongo-gridfsrocky-upgrade-python2-pyyamlrocky-upgrade-python2-pyyaml-debuginforocky-upgrade-python2-scipyrocky-upgrade-python2-scipy-debuginforocky-upgrade-python2-sqlalchemyrocky-upgrade-python2-testrocky-upgrade-python2-tkinterrocky-upgrade-python2-toolsrocky-upgrade-python3-bsonrocky-upgrade-python3-bson-debuginforocky-upgrade-python3-pymongorocky-upgrade-python3-pymongo-debuginforocky-upgrade-python3-pymongo-gridfsrocky-upgrade-python3-scipyrocky-upgrade-python3-scipy-debuginforocky-upgrade-python3-sqlalchemyrocky-upgrade-python36rocky-upgrade-python36-debugrocky-upgrade-python36-develrocky-upgrade-pyyaml-debugsourcerocky-upgrade-resource-agentsrocky-upgrade-resource-agents-aliyunrocky-upgrade-resource-agents-aliyun-debuginforocky-upgrade-resource-agents-debuginforocky-upgrade-resource-agents-debugsourcerocky-upgrade-resource-agents-gcprocky-upgrade-resource-agents-pafrocky-upgrade-scipy-debugsource | Mar 12, 2024 | Mar 17, 2021 | |
| Suse | — | suse-upgrade-python-pygmentssuse-upgrade-python2-pygmentssuse-upgrade-python3-pygments | Dec 2, 2021 | Mar 17, 2021 |
| Ubuntu | ubuntu-pro-upgrade-python-pygmentsubuntu-pro-upgrade-python3-pygmentsubuntu-upgrade-python-pygmentsubuntu-upgrade-python3-pygments | Mar 31, 2021 | Mar 17, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub