pygments kayıtları
pygments üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
38İzleyin | CVE-2015-8557İstismar yok | The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrarpygments · pygments · CWE-78 | Kritik9,0 | — | %6,7 | 8 Oca 2016 |
31İzleyin | CVE-2021-27291İstismar yok | In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions.pygments · pygments · CWE-1333 | Yüksek7,5 | — | %3,9 | 17 Mar 2021 |
31İzleyin | CVE-2021-20270İstismar yok | An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standapygments · pygments · CWE-835 | Yüksek7,5 | — | %2,8 | 23 Mar 2021 |
22İzleyin | CVE-2022-40896İstismar yok | A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.pygments · pygments · CWE-434 | Orta5,5 | — | %0,5 | 19 Tem 2023 |
- CVE-2015-855738İzleyin
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrar
KritikCVSS 9,0İstismar yokEPSS %7pygments · pygments8 Oca 2016
- CVE-2021-2729131İzleyin
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions.
YüksekCVSS 7,5İstismar yokEPSS %4pygments · pygments17 Mar 2021
- CVE-2021-2027031İzleyin
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standa
YüksekCVSS 7,5İstismar yokEPSS %3pygments · pygments23 Mar 2021
- CVE-2022-4089622İzleyin
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
OrtaCVSS 5,5İstismar yokEPSS %1pygments · pygments19 Tem 2023