CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

References

Affected packages

Git / github.com/pygments/pygments

Affected ranges

Type: GIT
Repo: https://github.com/pygments/pygments
Events: Introduced

bb81e6c194547874e37304681e0b44b85ee77127

Last affected

ccd14b98092c7189452cfbe825158c434b90b9cc

Affected versions

1.*

1.5

1.6

1.6rc1

2.*

2.0

2.0.1

2.0.2

2.0rc1

2.1

2.1.1

2.1.2

2.1.3

2.2.0

2.3.0

2.3.1

2.4.0

2.4.1

2.4.2

2.5.0

2.5.1

2.5.2

2.6.0

2.6.1

2.7.0

2.7.1

2.7.2

2.7.3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-20270.json"