Security Advisory

CVE-2021-27291

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-03-17 12:31:15

Last updated 2024-08-03 20:48:16

Assigner mitre

State PUBLISHED

Description

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

← Browse all CVEs View on cve.org ↗