Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-120217— Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos

Quick assessment

Affected
Delgan loguru
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Delgan 的 loguru 0.7.3 版本中发现了一个漏洞。受影响的组件是 ANSI 颜色标记解析器，具体位于文件 中的 函数。攻击者可通过构造恶意输入触发低效的正则表达式匹配，导致正则表达式复杂度爆炸（ReDoS）。该漏洞可被远程利用，且利用代码已公开，可能被恶意使用。厂商已在此披露早期被联系，但至今未作任何回应。

CVSS 4.3 · Medium EPSS 0.27% · P19

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
Delgan loguru 0.7.3 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-120217

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1333
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Delgan loguru 0.7.3 cpe:2.3:a:delgan:loguru:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-120217

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-120217

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-120217 (1)

Other References for CVE-2026-120217 (3)

IV. Related Vulnerabilities

Same vendor: Delgan
Same weakness: CWE-1333