Description
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a prismjs
unspecified to < 1.23.0affected
References
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581 ↗
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076582 ↗
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1076583 ↗
- https://github.com/PrismJS/prism/commit/c2f6a64426f44497a675cb32dccb079b3eff1609 ↗
- https://github.com/PrismJS/prism/issues/2583 ↗
- https://github.com/PrismJS/prism/pull/2584 ↗