422 matches found
Prism Resource Management Error Vulnerability
Prism is an application software. It is a lightweight, extensible syntax highlighting tool.A security vulnerability exists in versions of Prism prior to 1.24.0, which stems from the fact that when Prism is used to highlight untrusted text, an attacker can exploit the vulnerability to craft a stri...
CVE-2021-32723
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...
CVE-2021-32723
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...
CVE-2021-32723
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...
UBUNTU-CVE-2021-32723
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...
CVE-2021-32723
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...
Design/Logic Flaw
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...
CVE-2021-32723 Regular Expression Denial of Service (ReDoS) in Prism
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...
CVE-2021-32723
PrismJS Prism before v1.24.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when highlighting untrusted text. Specifically, ASCIIDoc and ERB are susceptible to crafted input that can cause excessive highlighting time; other languages are not affected. The vulnerability has been fix...
Regular Expression Denial of Service (ReDoS) in Prism
Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. Impact When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. Do not use the following languages to highlight untrusted...
GHSA-GJ77-59WH-66HG Regular Expression Denial of Service (ReDoS) in Prism
Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. Impact When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. Do not use the following languages to highlight untrusted...
Prism 资源管理错误漏洞
Prism is an application software. It is a lightweight, extensible syntax highlighting tool.A security vulnerability exists in versions of Prism prior to 1.24.0, which stems from the fact that when Prism is used to highlight untrusted text, an attacker can exploit the vulnerability to craft a stri...
Prism Operating System Command Injection Vulnerability
Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. Prisma suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause remote code execution...
Denial of Service in extension "Code Highlight" (codehighlight)
The extension bundles a vulnerable version of the 3rd party JavaScript component “prism” which is known to be vulnerable against Regular expression Denial of Service ReDoS...
CVE-2021-23341
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...
DEBIAN-CVE-2021-23341
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...
UBUNTU-CVE-2021-23341
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...
Regular Expression Denial of Service (ReDoS)
Overview prismjs/prism is a Lightweight, robust, elegant syntax highlighting. A spin-off project from Dabblet. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components. Details Denial o...
Regular Expression Denial of Service (ReDoS)
Overview prismjs is a lightweight, robust, elegant syntax highlighting library. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components. Details Denial of Service DoS describes a famil...
@decentralized-identity/sidetree (>=0.10.0-unstable.2b529f0 <=1.0.1-unstable.8507092), spec-up (>=0.9.0 <=0.10.1) +2 more potentially affected by unknown CVE via markdown-it-prism (>=2.0.3 <=2.1.2)
markdown-it-prism NPM version =2.0.3, =0.10.0-unstable.2b529f0, =0.9.0, =1.1.11, =0.10.1, =0.11.1-preview.1 Source cves: unknown CVE Source advisory: SNYK:JS-MARKDOWNITPRISM-1040462...