CVE-2021-23341

HIGH

prismjs < 1.23.0 - Regular Expression Denial of Service

Title source: llm
STIX 2.1

Description

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.

References (6)

Core 6
Core References
Exploit, Third Party Advisory x_refsource_misc
https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581
Exploit, Third Party Advisory x_refsource_misc
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076582
Exploit, Third Party Advisory x_refsource_misc
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1076583
Exploit, Patch, Third Party Advisory x_refsource_misc
https://github.com/PrismJS/prism/issues/2583
Patch, Third Party Advisory x_refsource_misc
https://github.com/PrismJS/prism/pull/2584

Scores

CVSS v3 7.5
EPSS 0.0317
EPSS Percentile 86.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (2)
npm/prismjs 0 - 1.23.0npm
prismjs/prism < 1.23.0
Published Feb 18, 2021
Tracked Since Feb 18, 2026