Описание
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| pygments | fixed | 2.15.1+dfsg-1 | package | |
| pygments | no-dsa | bookworm | package | |
| pygments | no-dsa | bullseye | package | |
| pygments | no-dsa | buster | package |
Примечания
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages-part-2/
https://github.com/pygments/pygments/issues/2356
https://github.com/pygments/pygments/issues/2355
https://github.com/pygments/pygments/commit/dd52102c38ebe78cd57748e09f38929fd283ad04 (2.14.0)
https://github.com/pygments/pygments/commit/97eb3d5ec7c1b3ea4fcf9dee30a2309cf92bd194 (2.15.0)
https://github.com/pygments/pygments/commit/fdf182a7af85b1deeeb637ca970d31935e7c9d52 (2.15.1)
EPSS
Связанные уязвимости
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
Уязвимость файла pygments/lexers/smithy.py компонента SmithyLexer программы подсветки синтаксиса Pygments, позволяющая нарушителю вызвать отказ в обслуживании
EPSS