Skip to content
OpenAdvisories

Package · Ubuntu

eric

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

    In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …