VDB
Sign up
—

PYSEC-2021-140

Quick fix

PYSEC-2021-140 — pygments: upgrade to the fixed version with the command below.

pip install --upgrade 'pygments>=2.7.4'

Details

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/pygments
Introduced in: 1.5Fixed in: 2.7.4
Fixpip install --upgrade 'pygments>=2.7.4'

References