CVE-2021-3801

Name of the Vulnerable Software and Affected Versions: Prism (affected versions not specified)

Description: The issue concerns Inefficient Regular Expression Complexity, also known as ReDoS (regular expression denial of service). An attacker can cause an application to consume excessive CPU by providing a crafted HTML comment as input. This is related to the prismjs package, a syntax highlighting library.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.