CVE-2026-120217: Delgan loguru, отказ на услуга

Описание

Оригинално описание

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Засегнати продукти

• Delgan loguru: 0.7.3

Вид слабост

• CWE-1333 Inefficient Regular Expression Complexity
• CWE-400 Неконтролирано потребление на ресурси

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-120217
• https://nvd.nist.gov/vuln/detail/CVE-2026-120217
• https://vuldb.com/vuln/429568
• https://vuldb.com/vuln/429568/cti
• https://vuldb.com/cve/CVE-2026-120217
• https://vuldb.com/submit/992264