https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:30:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-04543 bdu:2021-04543 https://cve.radiocsirt.org/vuln/bdu:2021-04543 https://cve.radiocsirt.org/vuln/certfr-2022-avi-050 certfr-2022-avi-050 https://cve.radiocsirt.org/vuln/certfr-2022-avi-050 https://cve.radiocsirt.org/vuln/cnvd-2021-55173 cnvd-2021-55173 https://cve.radiocsirt.org/vuln/cnvd-2021-55173 https://cve.radiocsirt.org/vuln/euvd-2026-28104 EUVD-2026-28104 https://cve.radiocsirt.org/vuln/euvd-2026-28104 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32723 <p>Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.</p> <p>Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32723 https://cve.radiocsirt.org/vuln/ghsa-gj77-59wh-66hg <p><strong>Affected:</strong> npm: prismjs</p> <p>Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS).</p> <p>### Impact</p> <p>When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. Do not use the following languages to highlight untrusted text.</p> <p>- ASCIIDoc - ERB</p> <p>Other languages are __not__ affected and can be used to highlight untrusted text.</p> <p>### Patches This problem has been fixed in Prism v1.24.</p> <p>### References</p> <p>- PrismJS/prism#2774 - PrismJS/prism#2688</p> <p><strong>Affected:</strong> npm: prismjs</p> <p>Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS).</p> <p>### Impact</p> <p>When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. Do not use the following languages to highlight untrusted text.</p> <p>- ASCIIDoc - ERB</p> <p>Other languages are __not__ affected and can be used to highlight untrusted text.</p> <p>### Patches This problem has been fixed in Prism v1.24.</p> <p>### References</p> <p>- PrismJS/prism#2774 - PrismJS/prism#2688</p> https://cve.radiocsirt.org/vuln/ghsa-gj77-59wh-66hg https://cve.radiocsirt.org/vuln/gsd-2021-32723 gsd-2021-32723 https://cve.radiocsirt.org/vuln/gsd-2021-32723 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32723 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-prismjs, Ubuntu:22.04:LTS: node-prismjs, Ubuntu:24.04:LTS: node-prismjs, Ubuntu:25.10: node-prismjs, Ubuntu:26.04:LTS: node-prismjs</p> <p>Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-prismjs, Ubuntu:22.04:LTS: node-prismjs, Ubuntu:24.04:LTS: node-prismjs, Ubuntu:25.10: node-prismjs, Ubuntu:26.04:LTS: node-prismjs</p> <p>Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32723