CVE-2021-20270 | BDVDB-2026-150772 Detail

python-pygments

Description#

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-835

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1922136
https://www.debian.org/security/2021/dsa-4889
https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html
https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html
https://www.oracle.com/security-alerts/cpuoct2021.html

Exploit#

No public exploit known

History#

Version 12021-03-23Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.