Denial of Service Vulnerability in Delgan Loguru Product
CVE-2026-120217

5.3MEDIUM

Key Information:

Vendor

Delgan

Status
Loguru
Vendor
CVE Published:
1 November 2026

What is CVE-2026-120217?

A vulnerability exists in the Delgan Loguru version 0.7.3, specifically within the AnsiParser.feed function of the ANSI Color-Markup Parser located in loguru/_colorizer.py. This vulnerability can lead to inefficient regular expression processing, enabling potential attackers to perform a denial of service attack remotely. The exploit has been made public, and the vendor has not addressed this issue despite prior disclosure attempts.

Affected Version(s)

loguru 0.7.3

References

https://vuldb.com/vuln/429568
vdb-entrytechnical-description
https://vuldb.com/vuln/429568/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-120217
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

xianggudahundun (VulDB User)
VulDB CNA Team
.