PYSEC-2023-117
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2022-40896
- Alias
- GHSA-mrwq-x4v8-fh7p
Description
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
Paquets affectés
| Paquet | Versions |
|---|---|
| PyPI · pygments | introduced 0, fixed 2.15.1 |
Références
- https://pypi.org/project/Pygments/ PACKAGE
- https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages-part-2/ WEB
- https://github.com/pygments/pygments/blob/master/pygments/lexers/smithy.py#L61 WEB
- https://github.com/advisories/GHSA-mrwq-x4v8-fh7p ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |