Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/35751?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/35751?format=api", "vulnerability_id": "VCID-qa6e-abwc-47a4", "summary": "In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.", "aliases": [ { "alias": "CVE-2021-27291" }, { "alias": "GHSA-pq64-v7f5-gqh8" }, { "alias": "PYSEC-2021-141" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20373?format=api", "purl": "pkg:pypi/pygments@2.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.7.4" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20352?format=api", "purl": "pkg:pypi/pygments@1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20353?format=api", "purl": "pkg:pypi/pygments@1.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20354?format=api", "purl": "pkg:pypi/pygments@1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/20355?format=api", "purl": "pkg:pypi/pygments@1.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9075?format=api", "purl": "pkg:pypi/pygments@1.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/9076?format=api", "purl": "pkg:pypi/pygments@1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/9077?format=api", "purl": "pkg:pypi/pygments@1.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9078?format=api", "purl": "pkg:pypi/pygments@1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/9079?format=api", "purl": "pkg:pypi/pygments@1.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/9080?format=api", "purl": "pkg:pypi/pygments@1.6rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.6rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9081?format=api", "purl": "pkg:pypi/pygments@1.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/9082?format=api", "purl": "pkg:pypi/pygments@2.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9083?format=api", "purl": "pkg:pypi/pygments@2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/9084?format=api", "purl": "pkg:pypi/pygments@2.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/9085?format=api", "purl": "pkg:pypi/pygments@2.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aape-ns89-2uar" }, { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/9086?format=api", "purl": "pkg:pypi/pygments@2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20356?format=api", "purl": "pkg:pypi/pygments@2.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20357?format=api", "purl": "pkg:pypi/pygments@2.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/20358?format=api", "purl": "pkg:pypi/pygments@2.1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/20359?format=api", "purl": "pkg:pypi/pygments@2.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20360?format=api", "purl": "pkg:pypi/pygments@2.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20361?format=api", "purl": "pkg:pypi/pygments@2.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20362?format=api", "purl": "pkg:pypi/pygments@2.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20363?format=api", "purl": "pkg:pypi/pygments@2.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20364?format=api", "purl": "pkg:pypi/pygments@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/20365?format=api", "purl": "pkg:pypi/pygments@2.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20366?format=api", "purl": "pkg:pypi/pygments@2.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.5.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/20367?format=api", "purl": "pkg:pypi/pygments@2.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20368?format=api", "purl": "pkg:pypi/pygments@2.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20369?format=api", "purl": "pkg:pypi/pygments@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.7.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20370?format=api", "purl": "pkg:pypi/pygments@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.7.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20371?format=api", "purl": "pkg:pypi/pygments@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/20372?format=api", "purl": "pkg:pypi/pygments@2.7.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-cz6q-73vy-tbcf" }, { "vulnerability": "VCID-qa6e-abwc-47a4" }, { "vulnerability": "VCID-rm69-vst8-xqbq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pygments@2.7.3" } ], "references": [ { "reference_url": "https://gist.github.com/b-c-ds/b1a2cc0c68a35c57188575eb496de5ce", "reference_id": "", "reference_type": "", "scores": [], "url": "https://gist.github.com/b-c-ds/b1a2cc0c68a35c57188575eb496de5ce" }, { "reference_url": "https://github.com/advisories/GHSA-pq64-v7f5-gqh8", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-pq64-v7f5-gqh8" }, { "reference_url": "https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00024.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00024.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ/" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4878", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2021/dsa-4878" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4889", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2021/dsa-4889" } ], "weaknesses": [], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qa6e-abwc-47a4" }