@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +3322 more potentially affected by CVE-2021-3801 via prismjs (>=1.2.0, <=1.24.1)

prismjs NPM version =1.2.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @ada87/hexo-prism-plugin 2.3.0 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 and more Source cves:...

CVE-2021-3801

Insufficient Regular Expression Complexity in prismjs leads to a Regular Expression Denial of Service ReDoS attack. An unauthenticated attacker can exploit this flaw to cause an application to consume an excess amount of CPU by providing a crafted HTML comment as input. This can result in a denia...

CVE-2021-3801

creationtimestamp| type| source ---|---|--- 2021-09-15 16:22:31+00:00| seen| https://t.me/cibsecurity/28885...

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3801

CVE-2021-3801 : Prismjs Prism vulnerable to a denial of service via inefficient regular expression complexity. A crafted input (e.g., crafted HTML comment) can trigger high CPU usage in Prism highlighting. Affected: Prismjs components relying on regex for highlighting. No exploits/vectors detaile...