CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-20270
High (7.5). EPSS 2.8% chance of exploitation in the next 30 days. Fixed in pygments 2.7.4.
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
Severity
- EPSS
- 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-835
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- fedoraproject:fedora
- pygments:pygments
- redhat:enterprise_linux
- redhat:openshift_container_platform
- redhat:openstack_platform
- redhat:software_collections
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9w8r-397f-prfh | PyPI | pygments | >=1.5 <2.7.4 | 2.7.4 |
| PYSEC-2021-140 | PyPI | pygments | >=1.5 <2.7.4 | 2.7.4 |