Skip to content
OpenAdvisories
Critical DLA-369-1 1 CVE

pygments - security update

Published Dec 15, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 pygments 1.3.1+dfsg-1+deb6u11

Vulnerabilities 1

  • Critical 9.0
    CVE-2015-8557

    Command Injection in Pygments

    The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.

    pygments pygments pygments Debian Ubuntu PyPI