npm/highlight.js: medium
ReDOS vulnerabities: multiple grammars
Action: Upgrade highlight.js to 10.4.1 or later.
npm i highlight.js@10.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 10.4.1 | - |
Fixed versions
| 10.4.1 |
Sources
- osv: GHSA-7wwv-vh3v-89cq
- https://github.com/highlightjs/highlight.js/security/advisories/GHSA-7wwv-vh3v-89cq
- https://github.com/highlightjs/highlight.js/commit/373b9d862401162e832ce77305e49b859e110f9c
- https://www.npmjs.com/package/@highlightjs/cdn-assets
- https://www.npmjs.com/package/highlight.js
published · modified · JSON