CVE Catalog
CVE-2015-8557
CriticalSummary
The FontManager._get_nix_font_path function in Pygments versions 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
Risk Assessment
An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update Pygments to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.