[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6d3bcbw3Zj8eibNMFGKWsljFLmVySMdoFY56g4wIWMY":3,"g5a-risk:CVE-2022-40896":114},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":38,"references":39,"referencesCount":63,"weaknesses":64,"weaknessesCount":38,"isActivelyExploited":73,"cisaInfo":27,"otxData":27,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":109,"notableEvents":110},"CVE-2022-40896","What is CVE-2022-40896?","A ReDoS issue was discovered in pygments\u002Flexers\u002Fsmithy.py in pygments through 2.15.0 via SmithyLexer.","2023-07-19T15:15:10.007","2024-03-28T03:15:07.647",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,0.00519,[30,30,30,30,30,30,30],"Medium",[34],{"vendor":35,"product":35,"version":36,"criteria":37,"vulnerable":4},"pygments","*","cpe:2.3:a:pygments:pygments:*:*:*:*:*:*:*:*",1,[40,45,49,52,57],{"url":41,"source":42,"tags":43},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fblob\u002Fmaster\u002Fpygments\u002Flexers\u002Fsmithy.py#L61","GitHub",[44],"Third Party Advisory",{"url":46,"source":47,"tags":48},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FEZGMXALE3HSP4OXC7UUWIKX3OXKZDTY3\u002F","Fedoraproject",[],{"url":50,"source":47,"tags":51},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FVUZO4BQCIY2S2KZYHERQMKURB7AHXDBO\u002F",[],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fpypi.org\u002Fproject\u002FPygments\u002F","Pypi",[56],"Product",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fpyup.io\u002Fposts\u002Fpyup-discovers-redos-vulnerabilities-in-top-python-packages-part-2\u002F","Pyup",[61,62,44],"Exploit","Patch",5,[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2022-40896? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-40896, a medium severity cyber security vulnerability from 2023. A ReDoS issue was discovered in pygments\u002Flexers\u002Fsmithy.py...","CVE-2022-40896, CVE-2022-40896 vulnerability, CVE-2022-40896 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, pygments security, pygments vulnerability","\u002Fwhat-is\u002Fcve-2022-40896",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":9,"dateModified":10,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-40896","Cybersecurity","CVE-2022-40896, CVE-2022-40896 vulnerability, CVE-2022-40896 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":104,"Negate":27,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":108},"378BBD2A-4BD6-47BF-B7C1-9CAB83F653BD","2.15.0",[],[],{"lastModified":10,"cacheTime":112,"version":113},1792348024640,"2.0",{"score":115,"band":32,"action":116,"scoredAt":117},40,"Plan remediation","2026-10-16T06:58:39.67296+00:00"]