Login Request a demo
PY
Product
Pygments
by Pygments · last CVE Jul 19, 2023
4
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 0
Severity
All severities4Critical1High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pygments to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-8557
9.0
7%
Jan 8
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in…
Affected: 1.2.2; 1.3; 1.3.1; 1.4; 1.5; 1.6; +4 more
CVE-2021-20270
7.5
3%
Mar 23
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as…
Affected: 1.5 through 2.7.3
CVE-2021-27291
7.5
4%
Mar 17
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions
Affected: 1.1 before 2.7.4
CVE-2022-40896
5.5
1%
Jul 19
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer
Affected: through 2.15.0
Showing 4