A ReDoS issue was discovered in pygments/lexers/smithy.py in Pygments until 2.15.0 via SmithyLexer.
Release Notes
pygments/pygments (Pygments)
### [`v2.15.0`](https://togithub.com/pygments/pygments/blob/HEAD/CHANGES#Version-2150)
[Compare Source](https://togithub.com/pygments/pygments/compare/2.14.0...2.15.0)
(released April 10th, 2023)
- Added lexers:
- Carbon ([#2362](https://togithub.com/pygments/pygments/issues/2362), [#2365](https://togithub.com/pygments/pygments/issues/2365), [#2366](https://togithub.com/pygments/pygments/issues/2366), [#2367](https://togithub.com/pygments/pygments/issues/2367), [#2368](https://togithub.com/pygments/pygments/issues/2368), [#2369](https://togithub.com/pygments/pygments/issues/2369), [#2370](https://togithub.com/pygments/pygments/issues/2370))
- Dax ([#2335](https://togithub.com/pygments/pygments/issues/2335), [#2345](https://togithub.com/pygments/pygments/issues/2345))
- MediaWiki Wikitext ([#2373](https://togithub.com/pygments/pygments/issues/2373), [#827](https://togithub.com/pygments/pygments/issues/827))
- PostgreSQL Explain ([#2398](https://togithub.com/pygments/pygments/issues/2398))
- WGSL (WebGPU Shading Language) ([#2386](https://togithub.com/pygments/pygments/issues/2386))
- X++ ([#2339](https://togithub.com/pygments/pygments/issues/2339))
- Updated lexers:
- AMDGPU: Add support for `scratch_` instructions, the `attr*.*` argument,
as well as the `off` modifier ([#2327](https://togithub.com/pygments/pygments/issues/2327)).
- APDL: Miscellaneous improvements ([#2314](https://togithub.com/pygments/pygments/issues/2314))
- bash/tcsh:
- Move `break` to keywords ([#2377](https://togithub.com/pygments/pygments/issues/2377))
- Improve bash math expansion lexing ([#2255](https://togithub.com/pygments/pygments/issues/2255), [#2353](https://togithub.com/pygments/pygments/issues/2353))
- Chapel: Support attributes ([#2376](https://togithub.com/pygments/pygments/issues/2376))
- CMake: Implement bracket style comments ([#2338](https://togithub.com/pygments/pygments/issues/2338), [#2354](https://togithub.com/pygments/pygments/issues/2354))
- CSS: Improve lexing of numbers inside function calls ([#2382](https://togithub.com/pygments/pygments/issues/2382), [#2383](https://togithub.com/pygments/pygments/issues/2383))
- diff: Support normal diff syntax, as opposed to unified diff syntax ([#2321](https://togithub.com/pygments/pygments/issues/2321))
- GLSL, HLSL:
- Support line continuations in preprocessor code ([#2350](https://togithub.com/pygments/pygments/issues/2350))
- Improve preprocessor directive handling ([#2357](https://togithub.com/pygments/pygments/issues/2357))
- LilyPond: minor update of builtins
- PHP: support attributes ([#2055](https://togithub.com/pygments/pygments/issues/2055), [#2347](https://togithub.com/pygments/pygments/issues/2347), [#2360](https://togithub.com/pygments/pygments/issues/2360)), fix anonymous classes without
parameters ([#2359](https://togithub.com/pygments/pygments/issues/2359)), improve lexing of variable variable syntax ([#2358](https://togithub.com/pygments/pygments/issues/2358))
- Python:
- Add missing builtins ([#2334](https://togithub.com/pygments/pygments/issues/2334))
- Fix inconsistent lexing of `None` ([#2406](https://togithub.com/pygments/pygments/issues/2406))
- Rebol/Red: Don't require script headers ([#2348](https://togithub.com/pygments/pygments/issues/2348), [#2349](https://togithub.com/pygments/pygments/issues/2349))
- Spice: Update keywords ([#2336](https://togithub.com/pygments/pygments/issues/2336))
- SQL+Jinja (`analyse_text` method): Fix catastrophic backtracking ([#2355](https://togithub.com/pygments/pygments/issues/2355))
- Terraform: Add `hcl` alias ([#2375](https://togithub.com/pygments/pygments/issues/2375))
- Declare support for Python 3.11 and drop support for Python 3.6 ([#2324](https://togithub.com/pygments/pygments/issues/2324)).
- Update `native` style to improve contrast ([#2325](https://togithub.com/pygments/pygments/issues/2325)).
- Update \`github-dark\`\` style to match latest Primer style ([#2401](https://togithub.com/pygments/pygments/issues/2401))
- Revert a change that made guessing lexers based on file names slower
on Python 3.10 and older ([#2328](https://togithub.com/pygments/pygments/issues/2328)).
- Fix some places where a locale-dependent encoding could unintentionally
be used instead of UTF-8 ([#2326](https://togithub.com/pygments/pygments/issues/2326)).
- Fix Python traceback handling ([#2226](https://togithub.com/pygments/pygments/issues/2226), [#2329](https://togithub.com/pygments/pygments/issues/2329)).
- Groff formatter: sort color definitions for reproducibility ([#2343](https://togithub.com/pygments/pygments/issues/2343))
- Move project metadata to `pyproject.toml`, remove `setup.py`
and `setup.cfg` ([#2342](https://togithub.com/pygments/pygments/issues/2342))
- The top-level `Makefile` has been removed. Instead, all shortcuts
for developing are now defined and run through tox. The `doc` folder
still contains a `Makefile` as an alternative to `tox -e doc`.
Configuration
📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
==2.14.0->==2.15.0GitHub Vulnerability Alerts
CVE-2022-40896
A ReDoS issue was discovered in
pygments/lexers/smithy.pyin Pygments until 2.15.0 via SmithyLexer.Release Notes
pygments/pygments (Pygments)
### [`v2.15.0`](https://togithub.com/pygments/pygments/blob/HEAD/CHANGES#Version-2150) [Compare Source](https://togithub.com/pygments/pygments/compare/2.14.0...2.15.0) (released April 10th, 2023) - Added lexers: - Carbon ([#2362](https://togithub.com/pygments/pygments/issues/2362), [#2365](https://togithub.com/pygments/pygments/issues/2365), [#2366](https://togithub.com/pygments/pygments/issues/2366), [#2367](https://togithub.com/pygments/pygments/issues/2367), [#2368](https://togithub.com/pygments/pygments/issues/2368), [#2369](https://togithub.com/pygments/pygments/issues/2369), [#2370](https://togithub.com/pygments/pygments/issues/2370)) - Dax ([#2335](https://togithub.com/pygments/pygments/issues/2335), [#2345](https://togithub.com/pygments/pygments/issues/2345)) - MediaWiki Wikitext ([#2373](https://togithub.com/pygments/pygments/issues/2373), [#827](https://togithub.com/pygments/pygments/issues/827)) - PostgreSQL Explain ([#2398](https://togithub.com/pygments/pygments/issues/2398)) - WGSL (WebGPU Shading Language) ([#2386](https://togithub.com/pygments/pygments/issues/2386)) - X++ ([#2339](https://togithub.com/pygments/pygments/issues/2339)) - Updated lexers: - AMDGPU: Add support for `scratch_` instructions, the `attr*.*` argument, as well as the `off` modifier ([#2327](https://togithub.com/pygments/pygments/issues/2327)). - APDL: Miscellaneous improvements ([#2314](https://togithub.com/pygments/pygments/issues/2314)) - bash/tcsh: - Move `break` to keywords ([#2377](https://togithub.com/pygments/pygments/issues/2377)) - Improve bash math expansion lexing ([#2255](https://togithub.com/pygments/pygments/issues/2255), [#2353](https://togithub.com/pygments/pygments/issues/2353)) - Chapel: Support attributes ([#2376](https://togithub.com/pygments/pygments/issues/2376)) - CMake: Implement bracket style comments ([#2338](https://togithub.com/pygments/pygments/issues/2338), [#2354](https://togithub.com/pygments/pygments/issues/2354)) - CSS: Improve lexing of numbers inside function calls ([#2382](https://togithub.com/pygments/pygments/issues/2382), [#2383](https://togithub.com/pygments/pygments/issues/2383)) - diff: Support normal diff syntax, as opposed to unified diff syntax ([#2321](https://togithub.com/pygments/pygments/issues/2321)) - GLSL, HLSL: - Support line continuations in preprocessor code ([#2350](https://togithub.com/pygments/pygments/issues/2350)) - Improve preprocessor directive handling ([#2357](https://togithub.com/pygments/pygments/issues/2357)) - LilyPond: minor update of builtins - PHP: support attributes ([#2055](https://togithub.com/pygments/pygments/issues/2055), [#2347](https://togithub.com/pygments/pygments/issues/2347), [#2360](https://togithub.com/pygments/pygments/issues/2360)), fix anonymous classes without parameters ([#2359](https://togithub.com/pygments/pygments/issues/2359)), improve lexing of variable variable syntax ([#2358](https://togithub.com/pygments/pygments/issues/2358)) - Python: - Add missing builtins ([#2334](https://togithub.com/pygments/pygments/issues/2334)) - Fix inconsistent lexing of `None` ([#2406](https://togithub.com/pygments/pygments/issues/2406)) - Rebol/Red: Don't require script headers ([#2348](https://togithub.com/pygments/pygments/issues/2348), [#2349](https://togithub.com/pygments/pygments/issues/2349)) - Spice: Update keywords ([#2336](https://togithub.com/pygments/pygments/issues/2336)) - SQL+Jinja (`analyse_text` method): Fix catastrophic backtracking ([#2355](https://togithub.com/pygments/pygments/issues/2355)) - Terraform: Add `hcl` alias ([#2375](https://togithub.com/pygments/pygments/issues/2375)) - Declare support for Python 3.11 and drop support for Python 3.6 ([#2324](https://togithub.com/pygments/pygments/issues/2324)). - Update `native` style to improve contrast ([#2325](https://togithub.com/pygments/pygments/issues/2325)). - Update \`github-dark\`\` style to match latest Primer style ([#2401](https://togithub.com/pygments/pygments/issues/2401)) - Revert a change that made guessing lexers based on file names slower on Python 3.10 and older ([#2328](https://togithub.com/pygments/pygments/issues/2328)). - Fix some places where a locale-dependent encoding could unintentionally be used instead of UTF-8 ([#2326](https://togithub.com/pygments/pygments/issues/2326)). - Fix Python traceback handling ([#2226](https://togithub.com/pygments/pygments/issues/2226), [#2329](https://togithub.com/pygments/pygments/issues/2329)). - Groff formatter: sort color definitions for reproducibility ([#2343](https://togithub.com/pygments/pygments/issues/2343)) - Move project metadata to `pyproject.toml`, remove `setup.py` and `setup.cfg` ([#2342](https://togithub.com/pygments/pygments/issues/2342)) - The top-level `Makefile` has been removed. Instead, all shortcuts for developing are now defined and run through tox. The `doc` folder still contains a `Makefile` as an alternative to `tox -e doc`.Configuration
📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.