Unrated
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and pri...
CVE-2021-23341
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-23341 node-prismjs Fixed in: 1.23.0+dfsg-1
- Ubuntu UBUNTU-CVE-2021-23341 node-prismjs
Original description The description as published by the source.
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- patch github.com
- patch github.com
- patch github.com
- report snyk.io
- report snyk.io
- report snyk.io