Skip to content
OpenAdvisories
Medium DLA-2511-1 1 CVE

highlight.js - security update

Published Dec 30, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 highlight.js 8.2+ds-5+deb9u1

Vulnerabilities 1

  • Medium 5.8
    CVE-2020-26237

    Prototype Pollution in highlight.js

    Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype…

    highlightjs highlight.js highlight.js highlight.js Debian Ubuntu npm