CVE-2026-120217

MEDIUM 4.3

Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-1333 CWE-400
Vendor	delgan
Product	loguru
Published	Nov 1, 2026

Stay Ahead of the Next One

Get instant alerts for delgan loguru

Be the first to know when new medium vulnerabilities affecting delgan loguru are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Delgan / loguru

0.7.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/429568 vuldb.com: https://vuldb.com/vuln/429568/cti vuldb.com: https://vuldb.com/cve/CVE-2026-120217 vuldb.com: https://vuldb.com/submit/992264

Credits

🔍 xianggudahundun (VulDB User) VulDB CNA Team