CVE-2024-53382
Published Mar 3, 2025Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.cur…
Vendor archive
prismjs CVEs
Beta · best-effort6 CVEs tagged to vendor prismjs — 0 Critical, 4 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2022-23647
Published Feb 18, 2022Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scri…
CVE-2021-3801
Published Sep 15, 2021prism is vulnerable to Inefficient Regular Expression Complexity
CVE-2021-32723
Published Jun 28, 2021Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (use…
CVE-2021-23341
Published Feb 18, 2021The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.
CVE-2020-15138
Published Aug 7, 2020Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Int…
Showing 1-6 of 6 CVEsPage 1 of 1