https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:25:30.269287+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4139 ALSA-2021:4139 — Moderate: resource-agents security, bug fix, and enhancement update 2026-10-06T10:25:31.551288+00:00

Affected: AlmaLinux:8: resource-agents, AlmaLinux:8: resource-agents-aliyun, AlmaLinux:8: resource-agents-gcp, AlmaLinux:8: resource-agents-paf

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Security Fix(es):

* python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

* python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-03173 bdu:2021-03173 2026-10-06T10:25:31.551368+00:00 bdu:2021-03173 https://cve.radiocsirt.org/vuln/bell-cve-2021-20270 Withdrawn: BELL-CVE-2021-20270 — CVE-2021-20270 does not affect BellSoft software 2026-10-06T10:25:31.551397+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-ansible-cve-2021-20270 BREW-ansible-CVE-2021-20270 — Infinite Loop in Pygments 2026-10-06T10:25:31.551415+00:00

Affected: Homebrew: ansible

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0395 certfr-2026-avi-0395 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-06T10:25:31.551438+00:00 certfr-2026-avi-0395 https://cve.radiocsirt.org/vuln/cnvd-2021-22851 cnvd-2021-22851 2026-10-06T10:25:31.551454+00:00 cnvd-2021-22851 https://cve.radiocsirt.org/vuln/euvd-2026-21588 EUVD-2026-21588 2026-10-06T10:25:31.551465+00:00 EUVD-2026-21588 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20270 fkie_cve-2021-20270 2026-10-06T10:25:31.551475+00:00

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

 https://cve.radiocsirt.org/vuln/ghsa-9w8r-397f-prfh GHSA-9w8r-397f-prfh — Infinite Loop in Pygments 2026-10-06T10:25:31.551495+00:00

Affected: PyPI: Pygments

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

 https://cve.radiocsirt.org/vuln/gsd-2021-20270 gsd-2021-20270 2026-10-06T10:25:31.551514+00:00 gsd-2021-20270 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20270 msrc_CVE-2021-20270 — An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax hig… 2026-10-06T10:25:31.551524+00:00 msrc_CVE-2021-20270 https://cve.radiocsirt.org/vuln/oesa-2021-1154 OESA-2021-1154 — python-pygments security update 2026-10-06T10:25:31.551540+00:00

Affected: openEuler:20.03-LTS-SP1: python-pygments

Security Fix(es): In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.(CVE-2021-27291) An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.(CVE-2021-20270)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1402-1 openSUSE-SU-2021:1402-1 — Security update for python-Pygments 2026-10-06T10:25:31.551562+00:00

Security update for python-Pygments

 https://cve.radiocsirt.org/vuln/pysec-2021-140 PYSEC-2021-140 2026-10-06T10:25:31.551578+00:00

Affected: PyPI: pygments

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

 https://cve.radiocsirt.org/vuln/rhsa-2021:0781 RHSA-2021:0781 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2.2 security and bug fix update 2026-10-06T10:25:31.551595+00:00

nodejs-node-notifier: command injection due to the options params not being sanitised when being passed an array nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function django: Potential directory-traversal via archive.extract() python-pygments: Infinite loop in SML lexer may lead to DoS python-bleach: Mutation cross-site scripting in bleach.clean python-pygments: ReDoS in multiple lexers

 https://cve.radiocsirt.org/vuln/suse-su-2021:1500-1 SUSE-SU-2021:1500-1 — Security update for python-Pygments 2026-10-06T10:25:31.551619+00:00

Security update for python-Pygments

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20270 UBUNTU-CVE-2021-20270 2026-10-06T10:25:31.551633+00:00

Affected: Ubuntu:Pro:14.04:LTS: pygments, Ubuntu:16.04:LTS: pygments, Ubuntu:18.04:LTS: pygments, Ubuntu:20.04:LTS: pygments

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.