Subject: Re: bug#47351: [email-masked] is vulnerable to at least CVE-2021-20270

From: Maxim Cournoyer <[email-masked]>
Date: Tue, 22 Mar 2022 22:31:58 -0400

Léo Le Bouter <[email-masked]> writes:

> CVE-2021-20270	23.03.21 18:15
> An infinite loop in SMLLexer in Pygments
> versions 1.5 to 2.7.3 may lead to denial of service when performing
> syntax highlighting of a Standard ML (SML) source file, as demonstrated
> by input that only contains the "exception" keyword.
>
> Upstream version 2.8.1 is not affected.

Which is now the current version packaged in Guix.

Thanks for the report!

Closing.

Maxim