In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-scipyUpgrade python36Upgrade python2-numpy-docUpgrade python3-PyMySQLUpgrade python3-wheel-wheelUpgrade python2-babelUpgrade python2-pluggyUpgrade python-sqlalchemy-docUpgrade python2-backportsUpgrade python2-coverageUpgrade python3-virtualenvUpgrade python2-PyMySQLUpgrade python2-CythonUpgrade python-pymongo-docUpgrade python2-jinja2Upgrade python3-bsonUpgrade python2-markupsafeUpgrade python-virtualenv-docUpgrade python2-ipaddressUpgrade python2-docs-infoUpgrade python3-sqlalchemyUpgrade python2-numpyUpgrade python36-rpm-macrosUpgrade python2-virtualenvUpgrade python2-pytzUpgrade python2-sqlalchemyUpgrade python3-pymongo-gridfsUpgrade babelUpgrade python3-pygmentsUpgrade python2-funcsigsUpgrade python3-docutilsUpgrade python2-setuptools_scmUpgrade python2-pyUpgrade python2-setuptoolsUpgrade python2-requestsUpgrade python2-idnaUpgrade python2-docutilsUpgrade python2-pytest-mockUpgrade python2-pysocksUpgrade python3-noseUpgrade resource-agents-aliyunUpgrade python2-chardetUpgrade python3-wheelUpgrade python2-rpm-macrosUpgrade python2-noseUpgrade resource-agents-gcpUpgrade python3-distroUpgrade python-nose-docsUpgrade python2-mockUpgrade python3-docsUpgrade python2-urllib3Upgrade python2-bsonUpgrade python3-pymongoUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pygmentsUpgrade python2-pyyamlUpgrade python2-setuptools-wheelUpgrade python2-attrsUpgrade resource-agentsUpgrade python36-develUpgrade resource-agents-pafUpgrade python2-psycopg2-debugUpgrade python2-dnsUpgrade python2-wheelUpgrade python2-wheel-wheelUpgrade python-psycopg2-docUpgrade python2-pymongoUpgrade python3-scipyUpgrade python2-pytestUpgrade python2-docsUpgrade python2-psycopg2-testsUpgrade python2-sixUpgrade python2-psycopg2Upgrade python36-debugUpgrade python2-pymongo-gridfsUpgrade python2-numpy-f2py | May 4, 2022 | Mar 17, 2021 |
| Alpine Linux | — | Upgrade py3-pygments | Oct 1, 2024 | Mar 17, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python3-pygmentsUpgrade python-pygmentsUpgrade python3-pygments-doc | Jul 21, 2023 | Mar 17, 2021 |
| Centos_linux | — | Upgrade python2-debugsourceUpgrade python3-wheelUpgrade scipy-debugsourceUpgrade python2-setuptoolsUpgrade python2-coverageUpgrade python2-mockUpgrade python2-wheel-wheelUpgrade python3-bson-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python3-docsUpgrade python2-scipy-debuginfoUpgrade python3-sqlalchemyUpgrade resource-agents-aliyunUpgrade python2-tkinterUpgrade python2-lxmlUpgrade python2-pyyamlUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade babelUpgrade python2-rpm-macrosUpgrade python2-virtualenvUpgrade python2-psycopg2-debuginfoUpgrade resource-agents-debuginfoUpgrade python2-funcsigsUpgrade Cython-debugsourceUpgrade python36-develUpgrade python3-pygmentsUpgrade python2-noseUpgrade python2-numpy-f2pyUpgrade python2-pluggyUpgrade python3-bsonUpgrade python-pymongo-docUpgrade python-sqlalchemy-docUpgrade python-pymongo-debuginfoUpgrade resource-agentsUpgrade python2-dnsUpgrade python2-pymongoUpgrade python2-setuptools_scmUpgrade python-psycopg2-docUpgrade python2-docsUpgrade python2-debugUpgrade python2-numpy-docUpgrade python2-backports-ssl_match_hostnameUpgrade python-pymongo-debugsourceUpgrade python2-babelUpgrade python2-psycopg2Upgrade python2-wheelUpgrade python3-scipyUpgrade python3-scipy-debuginfoUpgrade python2-requestsUpgrade python2-sixUpgrade python2-pygmentsUpgrade python3-pymongo-gridfsUpgrade resource-agents-pafUpgrade python3-pymongo-debuginfoUpgrade python3-docutilsUpgrade python-psycopg2-debuginfoUpgrade python2-testUpgrade python-virtualenv-docUpgrade python2-pymongo-debuginfoUpgrade python2-Cython-debuginfoUpgrade python2-chardetUpgrade python2-pytestUpgrade python36-rpm-macrosUpgrade python36-debugUpgrade python2-psycopg2-debug-debuginfoUpgrade python-nose-docsUpgrade numpy-debugsourceUpgrade resource-agents-debugsourceUpgrade python36Upgrade python2-setuptools-wheelUpgrade python2-ipaddressUpgrade python2-coverage-debuginfoUpgrade python-lxml-debugsourceUpgrade python3-PyMySQLUpgrade python2-bson-debuginfoUpgrade python2-pytzUpgrade python2-pymongo-gridfsUpgrade python2-libsUpgrade python2-jinja2Upgrade python2-toolsUpgrade python2-pyUpgrade python2-pip-wheelUpgrade python2-urllib3Upgrade python2-numpy-debuginfoUpgrade python2-develUpgrade python2-psycopg2-debugUpgrade python2-pipUpgrade python-coverage-debugsourceUpgrade PyYAML-debugsourceUpgrade python2-pysocksUpgrade python3-distroUpgrade python2-markupsafeUpgrade python2-numpyUpgrade python2-docs-infoUpgrade python2Upgrade python3-pymongoUpgrade python2-attrsUpgrade python2-pytest-mockUpgrade python2-lxml-debuginfoUpgrade python2-idnaUpgrade python2-CythonUpgrade python2-backportsUpgrade python2-docutilsUpgrade python2-debuginfoUpgrade python2-PyMySQLUpgrade python3-wheel-wheelUpgrade resource-agents-gcpUpgrade python3-noseUpgrade python2-sqlalchemyUpgrade python2-pyyaml-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade python2-scipyUpgrade python3-virtualenv | Nov 10, 2021 | Mar 17, 2021 |
| Debian | — | Upgrade mediawikiUpgrade pygments | Mar 22, 2021 | Mar 17, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade py38-pygments-25Upgrade py37-pygments-25Upgrade py39-pygmentsUpgrade py311-pygments-25Upgrade py37-pygmentsUpgrade py311-pygmentsUpgrade py39-pygments-25Upgrade py38-pygmentsUpgrade py310-pygmentsUpgrade py310-pygments-25 | Sep 1, 2023 | Aug 31, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-pygments | Sep 16, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-pygments | Apr 30, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-pygments | Jul 19, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-pygmentsUpgrade python3-pygments | May 18, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-pygmentsUpgrade python-pygments-help | Jul 2, 2021 | Mar 17, 2021 |
| Oracle Solaris | — | Upgrade library/python/pygments-37 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-39 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/python/pygments-27 to version 2.5.2-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 17, 2021 |
| Oracle_linux | — | Upgrade python3-wheel-wheelUpgrade python2-pipUpgrade python2-PyMySQLUpgrade python2-coverageUpgrade python2-develUpgrade python2-idnaUpgrade python2-libsUpgrade python2-pytest-mockUpgrade python2-pytzUpgrade python2-pyUpgrade python2-docs-infoUpgrade python2-pysocksUpgrade python36-debugUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-numpyUpgrade python2-virtualenvUpgrade python2-psycopg2-debugUpgrade python36-rpm-macrosUpgrade python2-sqlalchemyUpgrade python2-pymongo-gridfsUpgrade python-virtualenv-docUpgrade python2-scipyUpgrade python2-jinja2Upgrade python2-testUpgrade python2-backportsUpgrade python3-distroUpgrade python2-setuptools-wheelUpgrade python2-chardetUpgrade python36Upgrade python3-noseUpgrade python2-toolsUpgrade python2-docutilsUpgrade python2Upgrade python-nose-docsUpgrade python3-PyMySQLUpgrade python2-pyyamlUpgrade babelUpgrade python2-attrsUpgrade python3-pymongo-gridfsUpgrade python3-virtualenvUpgrade python2-pip-wheelUpgrade python2-CythonUpgrade python2-noseUpgrade resource-agentsUpgrade python3-docsUpgrade python3-bsonUpgrade python2-lxmlUpgrade python2-mockUpgrade python2-wheel-wheelUpgrade python2-wheelUpgrade python2-psycopg2Upgrade python2-numpy-f2pyUpgrade python2-markupsafeUpgrade python2-tkinterUpgrade python3-wheelUpgrade python3-docutilsUpgrade python2-rpm-macrosUpgrade python2-psycopg2-testsUpgrade python2-pytestUpgrade python-pymongo-docUpgrade python3-pygmentsUpgrade python2-docsUpgrade python2-sixUpgrade python2-pymongoUpgrade python-psycopg2-docUpgrade python2-setuptoolsUpgrade python2-setuptools_scmUpgrade python2-requestsUpgrade python3-pymongoUpgrade python2-pluggyUpgrade python-sqlalchemy-docUpgrade python2-dnsUpgrade python2-debugUpgrade python2-babelUpgrade python3-sqlalchemyUpgrade python2-bsonUpgrade python2-backports-ssl_match_hostnameUpgrade python36-develUpgrade python3-scipyUpgrade python2-urllib3Upgrade python2-pygmentsUpgrade python2-numpy-doc | Nov 19, 2021 | Jan 11, 2021 |
| Redhat_linux | — | Upgrade python2-pyyaml-debuginfoUpgrade python2-babelUpgrade python2-jinja2Upgrade python3-scipyUpgrade resource-agentsUpgrade python-lxml-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade resource-agents-gcpUpgrade python2-pipUpgrade python-psycopg2-debugsourceUpgrade python3-docsUpgrade python2-pyyamlUpgrade python2-sixUpgrade python2-setuptools-wheelUpgrade python2-lxml-debuginfoUpgrade python3-wheel-wheelUpgrade python36-debugUpgrade python2-scipy-debuginfoUpgrade python-psycopg2-docUpgrade python2-libsUpgrade python2-Cython-debuginfoUpgrade python2-urllib3Upgrade python2-debugUpgrade python2-setuptoolsUpgrade python2-CythonUpgrade python2-coverageUpgrade python-virtualenv-docUpgrade python-nose-docsUpgrade python2-bson-debuginfoUpgrade python3-sqlalchemyUpgrade resource-agents-debuginfoUpgrade python2-pymongoUpgrade python2-numpy-f2pyUpgrade python-pymongo-debugsourceUpgrade python3-PyMySQLUpgrade python2-psycopg2Upgrade python3-pygmentsUpgrade python2-idnaUpgrade python2-noseUpgrade python2-ipaddressUpgrade python-pymongo-debuginfoUpgrade python2-coverage-debuginfoNo solution existsUpgrade python-pymongo-docUpgrade python2-numpy-debuginfoUpgrade scipy-debugsourceUpgrade python3-bsonUpgrade python2-pluggyUpgrade python3-pymongo-gridfsUpgrade python36-rpm-macrosUpgrade python-psycopg2-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-chardetUpgrade Cython-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade python2-toolsUpgrade python2-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade python2-pytestUpgrade python2-requestsUpgrade python36-develUpgrade python3-scipy-debuginfoUpgrade python2-numpyUpgrade python3-bson-debuginfoUpgrade python3-pymongoUpgrade PyYAML-debugsourceUpgrade python2Upgrade python2-mockUpgrade python2-backports-ssl_match_hostnameUpgrade python2-docutilsUpgrade python2-pytzUpgrade python2-docs-infoUpgrade resource-agents-aliyunUpgrade python2-wheelUpgrade resource-agents-debugsourceUpgrade python2-pysocksUpgrade babelUpgrade python2-virtualenvUpgrade python2-bsonUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python3-docutilsUpgrade python2-attrsUpgrade python2-tkinterUpgrade python2-pip-wheelUpgrade python2-docsUpgrade python3-virtualenvUpgrade python3-noseUpgrade python3-wheelUpgrade python2-psycopg2-testsUpgrade python2-dnsUpgrade python2-pyUpgrade python-sqlalchemy-docUpgrade python3-pymongo-debuginfoUpgrade python2-testUpgrade python2-pytest-mockUpgrade python36Upgrade python-coverage-debugsourceUpgrade python2-wheel-wheelUpgrade python3-distroUpgrade python2-debugsourceUpgrade python2-psycopg2-debugUpgrade python2-backportsUpgrade python2-rpm-macrosUpgrade python2-markupsafeUpgrade python2-lxmlUpgrade python2-develUpgrade resource-agents-pafUpgrade python2-pygmentsUpgrade python2-pymongo-gridfsUpgrade python2-sqlalchemyUpgrade numpy-debugsourceUpgrade python2-numpy-docUpgrade python2-PyMySQLUpgrade python2-scipy | Nov 10, 2021 | Mar 17, 2021 |
| Rocky_linux | — | Upgrade python2-CythonUpgrade resource-agents-aliyun-debuginfoUpgrade resource-agents-debugsourceUpgrade resource-agents-gcpUpgrade python3-pymongo-debuginfoUpgrade python36-develUpgrade python2-toolsUpgrade resource-agentsUpgrade python-lxml-debugsourceUpgrade python2-bson-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-markupsafeUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-testUpgrade python2-numpyUpgrade python2-develUpgrade python-pymongo-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-pymongo-gridfsUpgrade python36Upgrade python2-lxml-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-debuginfoUpgrade python-psycopg2-docUpgrade python2-numpy-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-backportsUpgrade python2-coverage-debuginfoUpgrade numpy-debugsourceUpgrade python2Upgrade python2-Cython-debuginfoUpgrade python36-debugUpgrade python3-pymongoUpgrade python2-bsonUpgrade python2-libsUpgrade PyYAML-debugsourceUpgrade python2-lxmlUpgrade python3-bsonUpgrade python3-scipy-debuginfoUpgrade python2-debugsourceUpgrade python3-bson-debuginfoUpgrade python2-tkinterUpgrade python2-pyyamlUpgrade python2-pyyaml-debuginfoUpgrade resource-agents-aliyunUpgrade python2-scipy-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python3-sqlalchemyUpgrade python2-sqlalchemyUpgrade python2-coverageUpgrade python3-pymongo-gridfsUpgrade python-pymongo-debuginfoUpgrade python2-psycopg2Upgrade python2-pymongoUpgrade resource-agents-pafUpgrade python3-scipyUpgrade python2-scipyUpgrade resource-agents-debuginfoUpgrade scipy-debugsourceUpgrade python2-debugUpgrade python-psycopg2-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-psycopg2-testsUpgrade Cython-debugsource | Mar 12, 2024 | Mar 17, 2021 |
| Suse | — | Upgrade python3-pygmentsUpgrade python2-pygmentsUpgrade python-pygments | Dec 2, 2021 | Mar 17, 2021 |
| Ubuntu | — | Upgrade python-pygmentsUpgrade python3-pygmentsUpgrade python3-pygments (Ubuntu Pro)Upgrade python-pygments (Ubuntu Pro) | Mar 31, 2021 | Mar 17, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub