Back to bug 1980286

Who When What Removed Added
Marian Rehak 2021-07-08 09:17:44 UTC Blocks 1980287
Eric Christensen 2021-07-08 14:46:21 UTC Doc Text A flaw was found in npm-prismjs. An attacker can craft a string that will take a very very long time to highlight and result in ReDoS.
Sage McTaggart 2021-07-13 15:15:51 UTC Depends On 1981616
Depends On 1981864
Florencio Cano 2021-07-16 08:56:17 UTC Doc Text A flaw was found in npm-prismjs. An attacker can craft a string that will take a very very long time to highlight and result in ReDoS. A flaw was found in npm-prismjs. An attacker can craft a string that will take a very long time to highlight when used to work with un-trusted text resulting in ReDoS.

This can affect the system availability. There is no known risk of privilege
Doc Text escalation on data compromise.
CC caswilli, kaycoth fjansen
Red Hat Bugzilla 2021-08-31 22:33:47 UTC CC pkrupa
Red Hat Bugzilla 2021-09-15 05:47:55 UTC CC kakkoyun
Red Hat Bugzilla 2021-10-13 10:03:21 UTC CC alegrand
Red Hat Bugzilla 2021-10-15 11:51:56 UTC CC kconner
Red Hat Bugzilla 2022-01-08 05:28:10 UTC CC jokerman
Red Hat Bugzilla 2022-05-09 08:30:15 UTC CC aos-bugs
Red Hat Bugzilla 2022-06-30 23:03:10 UTC CC erooth
Red Hat Bugzilla 2022-08-12 04:30:45 UTC CC amuller
Red Hat Bugzilla 2023-01-01 05:32:26 UTC CC amctagga
Red Hat Bugzilla 2023-01-01 05:47:15 UTC CC flucifre
Red Hat Bugzilla 2023-01-01 05:52:29 UTC CC mhackett
Red Hat Bugzilla 2023-01-01 06:02:23 UTC CC bniver
Red Hat Bugzilla 2023-01-01 08:34:47 UTC CC mbenjamin
Red Hat Bugzilla 2023-01-01 08:44:02 UTC CC sostapov
Red Hat Bugzilla 2023-01-01 08:48:26 UTC CC vereddy
Alasdair Kergon 2023-01-04 05:43:50 UTC CC sostapov
Alasdair Kergon 2023-01-04 06:11:25 UTC CC bniver
Alasdair Kergon 2023-01-04 06:23:48 UTC CC mbenjamin
Alasdair Kergon 2023-01-04 06:43:51 UTC CC flucifre
Alasdair Kergon 2023-01-04 06:59:12 UTC CC vereddy
Alasdair Kergon 2023-01-04 11:29:24 UTC CC mhackett
Red Hat Bugzilla 2023-07-07 08:29:01 UTC Assignee security-response-team nobody

Back to bug 1980286