https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:41:42.638280+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04543 bdu:2021-04543 2026-10-04T15:41:42.755425+00:00 bdu:2021-04543 https://cve.radiocsirt.org/vuln/certfr-2022-avi-050 certfr-2022-avi-050 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu… 2026-10-04T15:41:42.755465+00:00 certfr-2022-avi-050 https://cve.radiocsirt.org/vuln/cnvd-2021-55173 cnvd-2021-55173 2026-10-04T15:41:42.755486+00:00 cnvd-2021-55173 https://cve.radiocsirt.org/vuln/euvd-2026-28104 EUVD-2026-28104 2026-10-04T15:41:42.755500+00:00 EUVD-2026-28104 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32723 fkie_cve-2021-32723 2026-10-04T15:41:42.755511+00:00

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.

 https://cve.radiocsirt.org/vuln/ghsa-gj77-59wh-66hg GHSA-gj77-59wh-66hg — Regular Expression Denial of Service (ReDoS) in Prism 2026-10-04T15:41:42.755542+00:00

Affected: npm: prismjs

Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS).

### Impact

When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. Do not use the following languages to highlight untrusted text.

- ASCIIDoc - ERB

Other languages are __not__ affected and can be used to highlight untrusted text.

### Patches This problem has been fixed in Prism v1.24.

### References

- PrismJS/prism#2774 - PrismJS/prism#2688

 https://cve.radiocsirt.org/vuln/gsd-2021-32723 gsd-2021-32723 2026-10-04T15:41:42.755572+00:00 gsd-2021-32723 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32723 UBUNTU-CVE-2021-32723 2026-10-04T15:41:42.755584+00:00

Affected: Ubuntu:20.04:LTS: node-prismjs, Ubuntu:22.04:LTS: node-prismjs, Ubuntu:24.04:LTS: node-prismjs, Ubuntu:25.10: node-prismjs, Ubuntu:26.04:LTS: node-prismjs

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.