Resource exhaustion in Delgan Loguru
CVE-2026-120217
A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability class: DoS (Denial of Service)
Published .
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
EPSS exploit prediction
EPSS: 0.003 (19.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 19.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
The 30-day trend appears once there are two daily scores.
Affected products
- Delgan Loguru — versions 0.7.3
Weakness classification (CWE)
References
- vuldb.com/vuln/429568 (technical-description, vdb-entry)
- vuldb.com/vuln/429568/cti (signature, permissions-required)
- vuldb.com/cve/CVE-2026-120217 (third-party-advisory)
- vuldb.com/submit/992264 (third-party-advisory)
Frequently asked questions
- What is CVE-2026-120217?
- CVE-2026-120217 is a medium-severity vulnerability in Delgan Loguru, classified under Uncontrolled Resource Consumption. CVSS score: 4.3/10. Published 2026-11-01.
- How severe is CVE-2026-120217?
- Medium severity. CVSS v3 base score is 4.3 out of 10.