Prismjs
Prismjs Prism: vulnerabilidades y CVE
Prismjs Prism tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-53382 | Media (5.4) | 0.34% | — | 3 mar 2025 | Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by… |
| CVE-2022-23647 | Media (6.1) | 1.5% | — | 18 feb 2022 | Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin… |
| CVE-2021-3801 | Media (6.5) | 1.0% | — | 15 sept 2021 | prism is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-32723 | Media (6.5) | 1.4% | — | 28 jun 2021 | Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a… |
| CVE-2021-23341 | Alta (7.5) | 3.2% | — | 18 feb 2021 | The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components. |