PYSEC-2021-140

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/pygments/PYSEC-2021-140.yaml

JSON Data

https://api.test.osv.dev/v1/vulns/PYSEC-2021-140

Aliases

Published

2021-03-23T17:15:00Z

Modified

2023-11-01T05:42:43.237133Z

Summary

[none]

Details

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

References

Affected packages

PyPI / pygments

Package

Name: pygments; View open source insights on deps.dev
Purl: pkg:pypi/pygments

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.5

Fixed

2.7.4

Affected versions

1.*

1.5

1.6rc1

1.6

2.*

2.0rc1

2.0

2.0.1

2.0.2

2.1

2.1.1

2.1.2

2.1.3

2.2.0

2.3.0

2.3.1

2.4.0

2.4.1

2.4.2

2.5.1

2.5.2

2.6.0

2.6.1

2.7.0

2.7.1

2.7.2

2.7.3

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/pygments/PYSEC-2021-140.yaml"