p PatchFirst

GHSA-77mv-mp2j-gxxh

GHSA-77mv-mp2j-gxxh · pygmentize Remote Code Execution

This page contains facts from public vulnerability sources. Check the original advisory before updating.

pygmentize is prone to remote code execution due to an unsafe sanitazation of user input when passed to the `highlight` function.

CVSS 8.1 · High · Fix available

Published
Updated

Stack: php

Affected products and versions

  • 3f/pygmentize Packagist

    Versions
    • 1.0
    • 1.1
    Affected ranges
    • ECOSYSTEM: < 1.2

    Update to 1.2

Original sources

Check your server →