npm/prismjs CVE-2021-3801: medium 6.5, EPSS 1.04%

prismjs Regular Expression Denial of Service vulnerability

Action: Upgrade prismjs to 1.25.0 or later.

npm i prismjs@1.25.0

Affected

Fixed versions

Sources

• osv: GHSA-hqhp-5p83-hx96
• https://nvd.nist.gov/vuln/detail/CVE-2021-3801
• https://github.com/prismjs/prism/commit/0ff371bb4775a131634f47d0fe85794c547232f9
• https://github.com/prismjs/prism
• https://huntr.dev/bounties/8c16ab31-6eb6-46d1-b9a4-387222fe1b8a

CVE-2021-3801 · published 2021-09-20T20:44:48Z · modified 2023-11-08T04:06:25.064044Z · JSON