Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.886335
Category:Fedora Local Security Checks
Title:Fedora: Security Advisory for python-pygments (FEDORA-2024-8eaf80107a)
Summary:The remote host is missing an update for the 'python-pygments'; package(s) announced via the FEDORA-2024-8eaf80107a advisory.
Description:Summary:
The remote host is missing an update for the 'python-pygments'
package(s) announced via the FEDORA-2024-8eaf80107a advisory.

Vulnerability Insight:
Pygments is a generic syntax highlighter suitable for use in code hosting,
forums, wikis or other applications that need to prettify source code.

Highlights are:

* a wide range of over 500 languages and other text formats is supported

* special attention is paid to details that increase highlighting quality

* support for new languages and formats are added easily,
most languages use a simple regex-based lexing mechanism

* a number of output formats is available, among them HTML, RTF, LaTeX
and ANSI sequences

* it is usable as a command-line tool and as a library

Affected Software/OS:
'python-pygments' package(s) on Fedora 38.

Solution:
Please install the updated package(s).

CVSS Score:
4.9

CVSS Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2022-40896
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZGMXALE3HSP4OXC7UUWIKX3OXKZDTY3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUZO4BQCIY2S2KZYHERQMKURB7AHXDBO/
https://github.com/pygments/pygments/blob/master/pygments/lexers/smithy.py#L61
https://pypi.org/project/Pygments/
https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages-part-2/
CopyrightCopyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.