CVE-2021-23341: Prismjs Prism

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.

Affected products

• Prismjs Prism: before 1.23.0 (fixed in 1.23.0)

Published 2021-02-18. Last modified 2026-06-17.