Описание
Denial of Service in extension "Code Highlight" (codehighlight)
The codehighlight extension bundles a vulnerable version of the 3rd party JavaScript component “prism” which is known to be vulnerable against Regular expression Denial of Service (ReDoS).
Пакеты
Наименование
brotkrueml/codehighlight
composer
Затронутые версииВерсия исправления
< 2.5.0
2.5.0
5 Medium
CVSS3
5 Medium
CVSS3