dedalozzo/pygmentize · Security
pygmentize Remote Code Execution
- GHSA ID
- GHSA-77mv-mp2j-gxxh
- Severity
- high
- Published
- Updated
- CVSS
- 8.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 8.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
pygmentize is prone to remote code execution due to an unsafe sanitazation of user input when passed to the highlight function.