Lucene search
+L

64 matches found

Github Security Blog
Github Security Blog
added 2021/03/01 7:52 p.m.55 views

Denial of service in prismjs

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.5AI score0.03167EPSS
SaveExploits1References9Affected Software1
vulnersOsv
vulnersOsv
added 2021/03/01 7:52 p.m.10 views

@21epub/resource-lib (>=1.0.0 <=1.0.3), @2fn/helpers (>=1.0.0 <=1.0.1) +2765 more potentially affected by CVE-2021-23341 via prismjs (>=0.0.1 <=1.22.0)

prismjs NPM version =0.0.1, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @adebawo-damilare/esm-reports-app =5.2.0 - @admin-bro/design-system =1.4.0 - @afzalh/aug07 =1.1.2 and more Source cves: CVE-2021-23341...

7.5CVSS7.1AI score0.03167EPSS
SaveExploits1
OSV
OSV
added 2021/03/01 7:52 p.m.17 views

GHSA-H4HR-7FG3-H35W Denial of service in prismjs

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.4AI score0.03167EPSS
SaveExploits1References8
Veracode
Veracode
added 2021/02/19 2:11 a.m.19 views

Regular Expression Denial Of Service (ReDoS)

prismjs is vulnerable to Regular Expression Denial Of Service ReDoS. An attacker is able to crash the system by submitting malicious string via the prism-asciidoc, prism-rest, prism-tap, prism-batch and prism-eiffel components...

7.5CVSS3.4AI score0.03167EPSS
SaveExploits1References4Affected Software3
RedhatCVE
RedhatCVE
added 2021/02/18 9:27 p.m.26 views

CVE-2021-23341

A flaw was found in nodejs-prismjs. A Regular Expression Denial of Service ReDoS is possible via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS3.2AI score0.03167EPSS
SaveExploits1References3
NVD
NVD
added 2021/02/18 4:15 p.m.28 views

CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS0.03167EPSS
SaveExploits1References6
OSV
OSV
added 2021/02/18 4:15 p.m.6 views

DEBIAN-CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.6AI score0.03167EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/18 4:15 p.m.14 views

CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS6.6AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2021/02/18 4:15 p.m.20 views

CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.1AI score0.03167EPSS
SaveExploits1References7
Prion
Prion
added 2021/02/18 4:15 p.m.18 views

Design/Logic Flaw

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

5CVSS7.5AI score0.03167EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2021/02/18 4:15 p.m.3 views

UBUNTU-CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.3AI score0.03167EPSS
SaveExploits1References8
CVE
CVE
added 2021/02/18 4:0 p.m.96 views

CVE-2021-23341

CVE-2021-23341 : PrismJS before 1.23.0 is vulnerable to a Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap, and prism-eiffel components. Connected advisories/tracking confirm the affected package and remediation guidance. Remediation: upgrade PrismJS to v...

7.5CVSS7.5AI score0.03167EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2021/02/18 4:0 p.m.41 views

CVE-2021-23341 Regular Expression Denial of Service (ReDoS)

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.8AI score0.03167EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2021/02/18 4:0 p.m.68 views

CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.6AI score0.03167EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2021/02/18 3:56 p.m.4 views

CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components...

7.5CVSS7.1AI score0.03167EPSS
SaveExploits1References7
Snyk
Snyk
added 2021/02/18 11:31 a.m.3 views

Regular Expression Denial of Service (ReDoS)

Overview prismjs/prism is a Lightweight, robust, elegant syntax highlighting. A spin-off project from Dabblet. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components. Details Denial o...

7.5CVSS9.1AI score0.03167EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv
added 2021/02/18 11:31 a.m.8 views

@21epub/resource-lib (>=1.0.0 <=1.0.3), @2fn/helpers (>=1.0.0 <=1.0.1) +2756 more potentially affected by CVE-2021-23341 via prismjs (>=1.10.0 <=1.22.0)

prismjs NPM version =1.10.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @adebawo-damilare/esm-reports-app =5.2.0 - @admin-bro/design-system =1.4.0 - @afzalh/aug07 =1.1.2 and more Source cves: CVE-2021-23341...

7.5CVSS7.1AI score0.03167EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/02/18 12:0 a.m.25 views

Prismjs Security Vulnerability

Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. A security vulnerability exists in Prismjs. The vulnerability stems from the application's susceptibility to a denial of service ReDoS attack triggered by a regular...

7.5CVSS7.1AI score0.03167EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2021/01/06 7:25 p.m.33 views

Regex denial of service vulnerability in codesample plugin

Impact A regex denial of service ReDoS vulnerability was discovered in a dependency of the codesample plugin. The vulnerability allowed poorly formed ruby code samples to lock up the browser while performing syntax highlighting. This impacts users of the codesample plugin using TinyMCE 5.5.1 or...

0.2AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/01/06 7:25 p.m.17 views

GHSA-H96F-FC7C-9R55 Regex denial of service vulnerability in codesample plugin

Impact A regex denial of service ReDoS vulnerability was discovered in a dependency of the codesample plugin. The vulnerability allowed poorly formed ruby code samples to lock up the browser while performing syntax highlighting. This impacts users of the codesample plugin using TinyMCE 5.5.1 or...

7.1AI score
SaveExploits0References3
Rows per page
Query Builder