PYSEC-2021-140

Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/pygments/PYSEC-2021-140.yaml
Aliases
Published
2021-03-23T17:15:00Z
Modified
2023-11-08T04:04:36.317980Z
Details

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

References

Affected packages

PyPI / pygments

Package

Name
pygments

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.5
Fixed
2.7.4

Affected versions

1.*

1.5
1.6rc1
1.6

2.*

2.0rc1
2.0
2.0.1
2.0.2
2.1
2.1.1
2.1.2
2.1.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.1
2.4.2
2.5.1
2.5.2
2.6.0
2.6.1
2.7.0
2.7.1
2.7.2
2.7.3