| शीर्षक | pygments <=2.19.2 Denial of Service |
|---|
| विवरण | A Regular Expression Denial of Service (ReDoS) vulnerability exists in the pygments project at pygments/lexers/archetype.py (line 296). The regex pattern (\d|[a-fA-F])+(-(\d|[a-fA-F])+){3,} designed for GUID matching contains nested repeating quantifiers, leading to catastrophic backtracking when processing partially matching malicious input. This results in severe performance degradation and can block the application thread indefinitely with sufficiently large input, complying with CWE-1333 (Inefficient Regular Expression Complexity).
More details: https://github.com/pygments/pygments/issues/3058 |
|---|
| स्रोत | ⚠️ https://github.com/pygments/pygments/issues/3058 |
|---|
| उपयोगकर्ता | ybdesire (UID 83239) |
|---|
| सबमिशन | 07/03/2026 01:06 PM (7 महीनों पहले) |
|---|
| संयम | 21/03/2026 10:10 AM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 352327 [pygments तक 2.19.2 archetype.py AdlLexer सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|