CVE-2022-40896

Description

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

Affected Platforms

Weakness Type

CWE-434

References

• https://github.com/pygments/pygments/blob/master/pygments/lexers/smithy.py#L61
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://pypi.org/project/Pygments/
• https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-package…
• https://github.com/pygments/pygments/blob/master/pygments/lexers/smithy.py#L61