This repository has been archived by the owner on Nov 28, 2021. It is now read-only.
CVE-2021-23341 (High) detected in prismjs-1.19.0.tgz, prismjs-1.17.1.tgz #270
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-23341 - High Severity Vulnerability
Vulnerable Libraries - prismjs-1.19.0.tgz, prismjs-1.17.1.tgz
prismjs-1.19.0.tgz
Lightweight, robust, elegant syntax highlighting. A spin-off project from Dabblet.
Library home page: https://registry.npmjs.org/prismjs/-/prismjs-1.19.0.tgz
Path to dependency file: cuddly-computing-machine/package.json
Path to vulnerable library: cuddly-computing-machine/node_modules/prismjs/package.json
Dependency Hierarchy:
prismjs-1.17.1.tgz
Lightweight, robust, elegant syntax highlighting. A spin-off project from Dabblet.
Library home page: https://registry.npmjs.org/prismjs/-/prismjs-1.17.1.tgz
Path to dependency file: cuddly-computing-machine/package.json
Path to vulnerable library: cuddly-computing-machine/node_modules/refractor/node_modules/prismjs/package.json
Dependency Hierarchy:
Vulnerability Details
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.
Publish Date: 2021-02-18
URL: CVE-2021-23341
CVSS 3 Score Details (7.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23341
Release Date: 2021-02-18
Fix Resolution: 1.23.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: