Skip to content
OpenAdvisories

Package · Debian

highlight.js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2020-26237

    Prototype Pollution in highlight.js

    Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype…

    highlightjs highlight.js highlight.js highlight.js Debian Ubuntu npm