https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:44:35.180267+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4139 ALSA-2021:4139 — Moderate: resource-agents security, bug fix, and enhancement update 2026-10-03T13:44:36.159615+00:00

Affected: AlmaLinux:8: resource-agents, AlmaLinux:8: resource-agents-aliyun, AlmaLinux:8: resource-agents-gcp, AlmaLinux:8: resource-agents-paf

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Security Fix(es):

* python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

* python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-03741 bdu:2021-03741 2026-10-03T13:44:36.159714+00:00 bdu:2021-03741 https://cve.radiocsirt.org/vuln/bell-cve-2021-27291 Withdrawn: BELL-CVE-2021-27291 — CVE-2021-27291 does not affect BellSoft software 2026-10-03T13:44:36.159740+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-ansible-cve-2021-27291 BREW-ansible-CVE-2021-27291 — Pygments vulnerable to Regular Expression Denial of Service (ReDoS) 2026-10-03T13:44:36.159762+00:00

Affected: Homebrew: ansible

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0395 certfr-2026-avi-0395 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T13:44:36.159804+00:00 certfr-2026-avi-0395 https://cve.radiocsirt.org/vuln/euvd-2026-25477 EUVD-2026-25477 2026-10-03T13:44:36.159866+00:00 EUVD-2026-25477 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27291 fkie_cve-2021-27291 2026-10-03T13:44:36.159883+00:00

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-pq64-v7f5-gqh8 GHSA-pq64-v7f5-gqh8 — Pygments vulnerable to Regular Expression Denial of Service (ReDoS) 2026-10-03T13:44:36.159913+00:00

Affected: PyPI: Pygments

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2021-27291 gsd-2021-27291 2026-10-03T13:44:36.159943+00:00 gsd-2021-27291 https://cve.radiocsirt.org/vuln/msrc_cve-2021-27291 msrc_CVE-2021-27291 — In pygments 1.1+ fixed in 2.7.4 the lexers used to parse programming languages rely heavily on regular expressions. Som… 2026-10-03T13:44:36.159959+00:00 msrc_CVE-2021-27291 https://cve.radiocsirt.org/vuln/oesa-2021-1154 OESA-2021-1154 — python-pygments security update 2026-10-03T13:44:36.159984+00:00

Affected: openEuler:20.03-LTS-SP1: python-pygments

Security Fix(es): In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.(CVE-2021-27291) An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.(CVE-2021-20270)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1521-1 openSUSE-SU-2021:1521-1 — Security update for python-Pygments 2026-10-03T13:44:36.160020+00:00

Security update for python-Pygments

 https://cve.radiocsirt.org/vuln/pysec-2021-141 PYSEC-2021-141 2026-10-03T13:44:36.160044+00:00

Affected: PyPI: pygments

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

 https://cve.radiocsirt.org/vuln/rhsa-2021:0781 RHSA-2021:0781 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2.2 security and bug fix update 2026-10-03T13:44:36.160071+00:00

nodejs-node-notifier: command injection due to the options params not being sanitised when being passed an array nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function django: Potential directory-traversal via archive.extract() python-pygments: Infinite loop in SML lexer may lead to DoS python-bleach: Mutation cross-site scripting in bleach.clean python-pygments: ReDoS in multiple lexers

 https://cve.radiocsirt.org/vuln/suse-su-2021:3814-1 SUSE-SU-2021:3814-1 — Security update for python-Pygments 2026-10-03T13:44:36.160107+00:00

Security update for python-Pygments

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27291 UBUNTU-CVE-2021-27291 2026-10-03T13:44:36.160130+00:00

Affected: Ubuntu:Pro:14.04:LTS: pygments, Ubuntu:16.04:LTS: pygments, Ubuntu:16.04:LTS: eric, Ubuntu:18.04:LTS: pygments, Ubuntu:18.04:LTS: eric, Ubuntu:20.04:LTS: pygments, Ubuntu:20.04:LTS: eric, Ubuntu:22.04:LTS: eric, Ubuntu:24.04:LTS: eric, Ubuntu:25.10: eric and 1 more

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.