Skip to content
OpenAdvisories
Low ALAS2023-2026-1973 1 CVE

Low: python-pygments security update (Amazon Linux 2023)

Published Jul 20, 2026 · Updated Jul 20, 2026

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4539: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Fixed packages 1

ReleasePackageFixed in
Amazon Linux · 2023 python3-pygments 0:2.7.4-1.amzn2023.0.3

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-4539.html