CVE-2021-20270CWE-835

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source…

published March 23, 2021

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02759 · 86.2th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2021-03-23T16:40Z
EPSS history
Timeline
  • 23 MAR 16:40Z
    An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source…
    cvelistv5