Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | pygments | 1.5+dfsg-1+deb7u1 |
| Debian · 8 | pygments | 2.0.1+dfsg-1.1+deb8u1 |
Vulnerabilities 1
-
Critical 9.0
Command Injection in Pygments
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.