Lucene search

K
nodejsAnonymousNODEJS:1638
HistoryMar 01, 2021 - 7:55 p.m.

Regular Expression Denial of Service

2021-03-0119:55:37
Anonymous
www.npmjs.com
29
prismjs
redos
vulnerability
upgrade
snyk advisory
github advisory
cve

EPSS

0.007

Percentile

79.6%

Overview

prismjs versions before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.

Recommendation

Upgrade to version 1.23.0 or later

References