CVE-2026-120217
Received Received - Intake

Inefficient Regular Expression Complexity in loguru

Publication date: 2026-11-01

Last updated on: 2026-11-01

Assigner: VulDB

Description
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-01
Last Modified
2026-11-01
Generated
2026-11-01
AI Q&A
2026-11-01
EPSS Evaluated
N/A
NVD
CVE-2026-120217
EUVD
EUVD-2026-114785

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Delgan loguru 0.7.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1333 The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Delgan loguru 0.7.3, specifically in the AnsiParser.feed function of loguru/_colorizer.py. It involves inefficient regular expression complexity, allowing remote attackers to exploit it. The exploit is public and the vendor did not respond to disclosure.

Impact Analysis

The impact is limited due to low CVSS scores (2.1 v4.0, 4.3 v3.1, 4.0 v2.0). It may cause denial of service via resource exhaustion but does not lead to data breaches or privilege escalation.

Mitigation Strategies

Upgrade Delgan loguru to a version that patches the AnsiParser.feed function vulnerability in loguru/_colorizer.py. If no patch is available, consider disabling ANSI color markup parsing or switching to an alternative logging library.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120217. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart