Lucene search

K
githubGitHub Advisory DatabaseGHSA-HQHP-5P83-HX96
HistorySep 20, 2021 - 8:44 p.m.

prismjs Regular Expression Denial of Service vulnerability

2021-09-2020:44:48
CWE-400
GitHub Advisory Database
github.com
29

0.001 Low

EPSS

Percentile

44.7%

Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU.

CPENameOperatorVersion
prismjslt1.25.0

0.001 Low

EPSS

Percentile

44.7%