Alpine/py3-pygments: high 7.5
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity an
Action: Upgrade py3-pygments to 2.6.1-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1-r1 | - |
Fixed versions
| 2.6.1-r1 |
Sources
- osv: ALPINE-CVE-2021-27291#Alpine:v3.12/py3-pygments
- https://security.alpinelinux.org/vuln/CVE-2021-27291
published · modified · JSON