Threats affecting pkg:pypi/pygments

CVE-2026-4539 is a medium severity vulnerability in the pygments library versions 2.19.0 through 2.19.2, specifically in the AdlLexer function within pygments/lexers/archetype.py. The flaw arises from inefficient regular expression complexity, which can be exploited locally by an attacker with limited privileges to cause performance degradation or denial of service. No user interaction or authentication beyond local access is required, and no integrity or confidentiality impact is reported. The vulnerability has a CVSS score of 4.8, reflecting its moderate risk.