GitHub Advisoryadvisory · npm

GHSA-h4hr-7fg3-h35w Denial of service in prismjs

HIGH Published 2021-03-01 Modified 2023-09-05 Official page ↗
Aliases
CVE-2021-23341
Ecosystem
npm
Packages
prismjs
Severity
High
Weaknesses
CWE-400
Reviewed
2021-02-24

Affected packages

• npm prismjs: < 1.23.0 → fixed in 1.23.0

Description

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the `prism-asciidoc`, `prism-rest`, `prism-tap` and `prism-eiffel` components.

Related

Alias · CVE (1)

  • CVE-2021-23341 The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest,… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References