Skip to content
OpenAdvisories

Package · npm

highlight.js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-7wwv-vh3v-89cq

    ReDOS vulnerabities: multiple grammars

    ### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking) [oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): > The Regular expression Denial of Service (ReDoS) is a Denial of Servi…

    highlight.js @highlightjs/cdn-assets npm
  • Medium 5.8
    CVE-2020-26237

    Prototype Pollution in highlight.js

    Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype…

    highlightjs highlight.js highlight.js highlight.js Debian Ubuntu npm