Regular Expression Denial of Service (ReDoS) in Prism

Description

Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS).

Recommendation

Update the prismjs package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.24.0
• Patched version(s): 1.24.0

References

• GHSA-gj77-59wh-66hg
• www.oracle.com
• CVE-2021-32723
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• prismjs Regular Expression Denial of Service vulnerability - CVE-2021-3801
• html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS) (GHSA-545q-3fg6-48m7) - CVE-2021-23346
• html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS) - CVE-2021-23346
• Regular Expression Denial of Service (ReDoS) (GHSA-vx3p-948g-6vhq) - CVE-2021-27290

Tags:

npm

prismjs