CVE-2021-27291

CVE-2021-27291

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

Source: CVE-2021-27291

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다