Debian/pygments: critical 9
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
Action: Upgrade pygments to 2.0.1+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1+dfsg-2 | - |
Fixed versions
| 2.0.1+dfsg-2 |
Sources
published · modified · JSON