Most recent entries from all

EUVD-2026-21109

fkie_cve-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity

GHSA-hqhp-5p83-hx96 — prismjs Regular Expression Denial of Service vulnerability

Affected: npm: prismjs

Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU.

gsd-2021-3801

RHSA-2021:4902 — Red Hat Security Advisory: ACS 3.67 security and enhancement update

civetweb: directory traversal when using the built-in example HTTP form-based file upload mechanism via the mg_handle_form_request API nodejs-axios: Regular expression denial of service in trim function nodejs-prismjs: ReDoS vulnerability nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet helm: information disclosure vulnerability golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196)

UBUNTU-CVE-2021-3801

Affected: Ubuntu:20.04:LTS: node-prismjs, Ubuntu:22.04:LTS: node-prismjs, Ubuntu:24.04:LTS: node-prismjs, Ubuntu:25.10: node-prismjs, Ubuntu:26.04:LTS: node-prismjs

prism is vulnerable to Inefficient Regular Expression Complexity