github_osv/GHSA-hqhp-5p83-hx96
prismjs Regular Expression Denial of Service vulnerability
Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU.
gitlab/npm/prismjs/CVE-2021-3801
Incorrect Comparison
prism is vulnerable to Inefficient Regular Expression Complexity