Most recent entries from all

bdu:2024-00830

BREW-ansible-CVE-2022-40896 — Pygments vulnerable to ReDoS

Affected: Homebrew: ansible

A ReDoS issue was discovered in `pygments/lexers/smithy.py` in Pygments until 2.15.0 via SmithyLexer.

certfr-2023-avi-0860 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu…

certfr-2023-avi-0860

EUVD-2026-204737

fkie_cve-2022-40896

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

GHSA-mrwq-x4v8-fh7p — Pygments vulnerable to ReDoS

Affected: PyPI: Pygments

A ReDoS issue was discovered in `pygments/lexers/smithy.py` in Pygments until 2.15.0 via SmithyLexer.

gsd-2022-40896

msrc_CVE-2022-40896 — A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

msrc_CVE-2022-40896

OESA-2023-1477 — python-pygments security update

Affected: openEuler:22.03-LTS: python-pygments

Pygments is a generic syntax highlighter suitable for use in code hosting, forums, wikis or other applications that need to prettify source code. Security Fix(es): A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.(CVE-2022-40896)

PYSEC-2023-117

Affected: PyPI: pygments

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

RHSA-2024:1057 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

pygments: ReDoS in pygments python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument python-aiohttp: numerous issues in HTTP parser with header parsing aiohttp: HTTP request modification aiohttp: CRLF injection if user controls the HTTP method using aiohttp client pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex platform: Insecure websocket used when interacting with EDA server jinja2: HTML attribute injection when passing user input as keys to xmlattr filter Django: denial-of-service in ``intcomma`` template filter

UBUNTU-CVE-2022-40896

Affected: Ubuntu:18.04:LTS: pygments, Ubuntu:20.04:LTS: pygments, Ubuntu:22.04:LTS: pygments

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

WID-SEC-W-2024-0113 — Oracle Utilities Applications: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Utilities Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.