Skip to content
OpenAdvisories

Package · Debian

node-prismjs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 4.9
    CVE-2024-53382

    PrismJS DOM Clobbering vulnerability

    Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

    prismjs prism prismjs node-prismjs Debian Ubuntu npm
  • High 7.5
    CVE-2022-23647

    Cross-site Scripting in Prism

    Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output, leadin…

    prismjs prism prismjs node-prismjs Debian Ubuntu npm
  • High 7.5
    CVE-2021-3801

    Inefficient Regular Expression Complexity in prismjs/prism

    prism is vulnerable to Inefficient Regular Expression Complexity

    prismjs prismjs/prism prismjs node-prismjs Debian Ubuntu npm
  • High 7.5
    CVE-2021-23341

    Regular Expression Denial of Service (ReDoS)

    The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.

    prismjs node-prismjs node-prismjs Debian Ubuntu npm
  • High 7.1
    CVE-2020-15138

    Cross-Site Scripting in Prism

    Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism >=v…

    prismjs prism prismjs node-prismjs Debian Ubuntu npm