Vulnerabilities for Pygments

First version without a known vulnerability: 2.20.0

Details

• GHSA-5239-wwwm-4pmq2026-03-22

  Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

  Fixed in: 2.20.0

• GHSA-mrwq-x4v8-fh7p2023-07-19

  Pygments vulnerable to ReDoS

  Fixed in: 2.15.0, 2.15.1

• GHSA-fff8-4w9p-7v762022-05-17

  Command Injection in Pygments

  Fixed in: 2.1

• GHSA-9w8r-397f-prfh2021-04-20

  Infinite Loop in Pygments

  Fixed in: 2.7.4

• GHSA-pq64-v7f5-gqh82021-03-29

  Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

  Fixed in: 2.7.4, 2e7e8c4a7b318f4032493773732754e418279a14