{"id":"CVE-2026-120217","state":"PUBLISHED","title":"Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos","description":"A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-11-01T06:15:17.369Z","updatedAt":"2026-11-01T06:15:17.369Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Delgan loguru"],"affected":[{"vendor":"Delgan","product":"loguru","versions":[{"version":"0.7.3","status":"affected"}],"cpes":["cpe:2.3:a:delgan:loguru:*:*:*:*:*:*:*:*"],"modules":["ANSI Color-Markup Parser"]}],"references":["https://vuldb.com/vuln/429568","https://vuldb.com/vuln/429568/cti","https://vuldb.com/cve/CVE-2026-120217","https://vuldb.com/submit/992264"],"weaknesses":["CWE-1333","CWE-400"],"ingestedAt":"2026-11-01T06:24:05.917Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/120xxx/CVE-2026-120217.json","commit":"cab29edf1226d44d5b263aef779d74c39d31d453","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-120217","state":"PUBLISHED","datePublished":"2026-11-01T06:15:17.369Z","dateUpdated":"2026-11-01T06:15:17.369Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-10-31T16:29:58.549Z"},"containers":{"cna":{"title":"Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos","descriptions":[{"lang":"en","value":"A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"Delgan","product":"loguru","versions":[{"version":"0.7.3","status":"affected"}],"cpes":["cpe:2.3:a:delgan:loguru:*:*:*:*:*:*:*:*"],"modules":["ANSI Color-Markup Parser"]}],"references":[{"url":"https://vuldb.com/vuln/429568","name":"VDB-429568 | Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/429568/cti","name":"VDB-429568 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-120217","name":"CVE-2026-120217 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/992264","name":"Submit #992264 | Delgan loguru 0.7.3 Denial of Service","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1333","type":"CWE","lang":"en","description":"Inefficient Regular Expression Complexity"}]},{"descriptions":[{"cweId":"CWE-400","type":"CWE","lang":"en","description":"Resource Consumption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-11-01T06:15:17.369Z"},"timeline":[{"time":"2026-10-31T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-10-31T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-10-31T17:35:05.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"xianggudahundun (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202611"]}}}}