GitHub Advisoryadvisory · PyPI

GHSA-9w8r-397f-prfh Infinite Loop in Pygments

HIGH Published 2021-04-20 Modified 2024-10-14 Official page ↗
Aliases
CVE-2021-20270
Ecosystem
PyPI
Packages
Pygments
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835
Reviewed
2021-04-12

Affected packages

• PyPI Pygments: >= 1.5, < 2.7.4 → fixed in 2.7.4

Description

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

Related

Alias · CVE (1)

  • CVE-2021-20270 An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a… vulnerability

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References