← All advisories

Medium severity6.5NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026

CVE-2021-3801

CVE-2021-3801

Description

prism is vulnerable to Inefficient Regular Expression Complexity

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
prismjsnpm	< 1.25.0	1.25.0

Affected products

3

Prismtechstudios/Prism2 versions
cpe:2.3:a:prismjs:prism:*:*:*:*:*:node.js:*:*+ 1 more
- cpe:2.3:a:prismjs:prism:*:*:*:*:*:node.js:*:*range: <1.25.0
- (no CPE)range: unspecified
ghsa-coords
pkg:npm/prismjs
Range: < 1.25.0

Patches

Vulnerability mechanics

References

4

github.com/prismjs/prism/commit/0ff371bb4775a131634f47d0fe85794c547232f9nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/8c16ab31-6eb6-46d1-b9a4-387222fe1b8anvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-hqhp-5p83-hx96ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3801ghsaADVISORY

News mentions

0

No linked articles in our index yet.