---
id: CVE-2026-120217
title: Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos
summary: >-
  A vulnerability was detected in Delgan loguru 0.7.3. The affected element is
  the function AnsiParser.feed of the file loguru/_colorizer.py of the component
  ANSI Color-Markup Parser. Performing a manipulation results in inefficient
  regula…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-1333
  - CWE-400
vendor: Delgan
product: loguru
affected:
  - loguru 0.7.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T15:41:29.936781Z'
published: '2026-11-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T15:41:42.599Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120217'
references:
  - url: 'https://vuldb.com/vuln/429568'
    label: >-
      VDB-429568 | Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed
      redos
  - url: 'https://vuldb.com/vuln/429568/cti'
    label: 'VDB-429568 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-120217'
    label: CVE-2026-120217 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/992264'
    label: 'Submit #992264 | Delgan loguru 0.7.3 Denial of Service'
tags:
  - cve.org
epss: 0.00271
epssPercentile: 0.19417
ingestedAt: '2026-11-05T21:36:00.913Z'
---

## Overview

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser. Performing a manipulation results in inefficient regular expression complexity. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `loguru 0.7.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.