{"action":"Upgrade highlight.js to 10.4.1 or later.","affected":[{"fixed":"10.4.1","introduced":"9.0.0"}],"component":"highlight.js","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["10.4.1"],"ghsa_id":"GHSA-7wwv-vh3v-89cq","id":"tcs_01M5KFB4FCFR9W9ECMA5DAV1XW","modified_at":"2026-09-10T03:48:59.793103804Z","published_at":"2020-12-04T16:47:20Z","references":["https://osv.dev/vulnerability/GHSA-7wwv-vh3v-89cq","https://github.com/highlightjs/highlight.js/security/advisories/GHSA-7wwv-vh3v-89cq","https://github.com/highlightjs/highlight.js/commit/373b9d862401162e832ce77305e49b859e110f9c","https://www.npmjs.com/package/@highlightjs/cdn-assets","https://www.npmjs.com/package/highlight.js"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7wwv-vh3v-89cq","url":"https://osv.dev/vulnerability/GHSA-7wwv-vh3v-89cq"}],"summary":"ReDOS vulnerabities: multiple grammars"}