[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVI5NpwQO0Ou5Vn9qgQf-VgXBI__j4AfI4UM16Cef9Tk":3,"g5a-risk:CVE-2021-27291":166},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":35,"references":63,"referencesCount":98,"weaknesses":99,"weaknessesCount":108,"isActivelyExploited":109,"cisaInfo":26,"otxData":26,"relatedBlogPosts":110,"seoMetadata":111,"configurations":136,"relatedVendorCves":162,"notableEvents":163},"CVE-2021-27291","What is CVE-2021-27291?","In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.","In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have ex...","2021-03-17T13:15:15.137","2023-11-07T03:31:56.783",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.03906,[39,39,39,39,39,39,39],"High",[43,47,52,55,60],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"pygments","*","cpe:2.3:a:pygments:pygments:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"fedoraproject","fedora","32","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":61,"criteria":62,"vulnerable":4},"33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",[64,70,74,79,82,85,89,92,95],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgist.github.com\u002Fb-c-ds\u002Fb1a2cc0c68a35c57188575eb496de5ce","GitHub",[68,69],"Exploit","Third Party Advisory",{"url":71,"source":66,"tags":72},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F2e7e8c4a7b318f4032493773732754e418279a14",[73,69],"Patch",{"url":75,"source":76,"tags":77},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F03\u002Fmsg00024.html","Debian",[78,69],"Mailing List",{"url":80,"source":76,"tags":81},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F05\u002Fmsg00003.html",[78,69],{"url":83,"source":76,"tags":84},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F05\u002Fmsg00006.html",[78,69],{"url":86,"source":87,"tags":88},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FGSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55\u002F","Fedoraproject",[],{"url":90,"source":87,"tags":91},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FWSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ\u002F",[],{"url":93,"source":76,"tags":94},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-4878",[69],{"url":96,"source":76,"tags":97},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-4889",[69],9,[100],{"id":101,"name":102,"description":103,"extendedDescription":104,"status":105,"abstraction":106,"structure":107},"CWE-1333","Inefficient Regular Expression Complexity","The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.","Some regular expression engines have a feature called \"backtracking\". If the token cannot match, the engine \"backtracks\" to a position that may result in a different token that can match.\n                Backtracking becomes a weakness if all of these conditions are met:","Draft","Base","Simple",1,false,[],{"title":112,"metaDescription":113,"keywords":114,"canonicalUrl":115,"structuredData":116},"What is CVE-2021-27291? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-27291, a high severity cyber security vulnerability from 2021. In pygments 1.1+, fixed in 2.7.4, the lexers used to parse ...","CVE-2021-27291, CVE-2021-27291 vulnerability, CVE-2021-27291 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, pygments security, debian security, fedoraproject security, pygments vulnerability, debian_linux vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2021-27291",{"@context":117,"@type":118,"headline":112,"description":113,"datePublished":10,"dateModified":11,"author":119,"publisher":123,"about":127,"mainEntityOfPage":131,"articleSection":134,"keywords":135},"https:\u002F\u002Fschema.org","TechArticle",{"@type":120,"name":121,"url":122},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":120,"name":121,"url":122,"logo":124},{"@type":125,"url":126},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":128,"name":6,"description":129,"additionalType":130},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":132,"@id":133},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-27291","Cybersecurity","CVE-2021-27291, CVE-2021-27291 vulnerability, CVE-2021-27291 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[137,146,154],{"Operator":26,"Negate":26,"Nodes":138},[139],{"Operator":140,"Negate":26,"CPEMatch":141},"OR",[142],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":144,"VersionEndExcluding":145,"VersionEndIncluding":26},"CD77E0B1-BE2B-4B95-91AA-AD9AAEFD6DA8","1.1","2.7.4",{"Operator":26,"Negate":26,"Nodes":147},[148],{"Operator":140,"Negate":26,"CPEMatch":149},[150,152],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":153,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":155},[156],{"Operator":140,"Negate":26,"CPEMatch":157},[158,160],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"36D96259-24BD-44E2-96D9-78CE1D41F956",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",[],[],{"lastModified":11,"cacheTime":165,"version":32},1792356221171,{"score":167,"band":168,"action":169,"scoredAt":170},48,"Medium","Plan remediation","2026-10-16T06:50:42.585458+00:00"]