PyPI/pygments CVE-2022-40896: unknown, EPSS 0.52%
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
Action: Upgrade pygments to 2.15.1 or later.
pip install pygments==2.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.15.1 | - |
Fixed versions
| 2.15.1 |
Sources
- osv: PYSEC-2023-117
- https://pypi.org/project/Pygments/
- https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages-part-2/
- https://github.com/pygments/pygments/blob/master/pygments/lexers/smithy.py#L61
- https://github.com/advisories/GHSA-mrwq-x4v8-fh7p
CVE-2022-40896 · published · modified · JSON