CVE-2022-40896: Pygments

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

Affected products

• Pygments Pygments: up to and including 2.15.0

Published 2023-07-19. Last modified 2026-06-17.