CVE-2026-120217: Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos

Published Nov 1, 2026

Updated

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Event History

Nov 1, 2026

CVE Published

via MITRE·06:15 AM

Data Sourced

via MITRE·06:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need?

The CVSS vector indicates network access and low privileges are required. No user interaction is required.

What is the practical impact of exploitation?

The reported impact is limited to availability. Manipulating the affected parser can cause inefficient regular-expression processing, which may degrade service performance.

How can I identify potentially affected deployments?

Review systems using Delgan loguru version 0.7.3, particularly where the ANSI Color-Markup Parser and its AnsiParser.feed function are reachable over the network by low-privileged users.

Is exploit code available?

Yes. The vulnerability report states that a public exploit exists and may be used.

CVE-2026-120217: Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos

Event History

Frequently Asked Questions

What level of access does an attacker need?

What is the practical impact of exploitation?

How can I identify potentially affected deployments?

Is exploit code available?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

What is the practical impact of exploitation?

How can I identify potentially affected deployments?

Is exploit code available?