| Package | Affected versions | Patched versions |
|---|---|---|
| prism | < 1.23.0 | 1.23.0 |
| prismjs | < 1.23.0 | 1.23.0 |
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free