VDB
GHSA-7WWV-VH3V-89CQ
GHSA-7WWV-VH3V-89CQ
PUBLISHED
CVSS 6.900000095367432 MEDIUM
ReDOS vulnerabities: multiple grammars
Risk Scores
CVSS 4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | highlight.js | 9.0.0, 9.0.0, 9.0.0 |
| highlightjs | cdn-assets | 0, 0, 0 |
Timeline
- Dec 4, 2020 CVE Published
- May 3, 2022 CVE Updated
References
- GitHub Advisory GHSA-7wwv-vh3v-89cq vendor-advisory
- https://www.npmjs.com/package/highlight.js url
- https://www.npmjs.com/package/@highlightjs/cdn-assets url
- https://github.com/highlightjs/highlight.js/commit/373b9d862401162e832ce77305e49b859e110f9c fix
- https://github.com/highlightjs/highlight.js/security/advisories/GHSA-7wwv-vh3v-89cq url