Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/python-pygments@2.7.4-1
purl pkg:alpm/archlinux/python-pygments@2.7.4-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-1na8-nyq1-yfcy An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword. CVE-2021-20270
GHSA-9w8r-397f-prfh
PYSEC-2021-140
VCID-brg4-rv29-1fgz In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service. CVE-2021-27291
GHSA-pq64-v7f5-gqh8
PYSEC-2021-141

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:27:18.793227+00:00 Arch Linux Importer Fixing VCID-1na8-nyq1-yfcy https://security.archlinux.org/AVG-1662 38.0.0
2026-04-01T18:27:18.769313+00:00 Arch Linux Importer Fixing VCID-brg4-rv29-1fgz https://security.archlinux.org/AVG-1662 38.0.0