| Package | Affected versions | Patched versions |
|---|---|---|
| prism | < 1.25.0 | 1.25.0 |
| prismjs | < 1.25.0 | 1.25.0 |
Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free