Prismjs Prism
6 CVEs affecting Prismjs Prism. Latest disclosed: 2025-03-03. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23647 | High | 7.5 | 2022-02-18 | Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achie… |
CVE-2021-23341 | High | 7.5 | 2021-02-18 | The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel… |
CVE-2021-32723 | High | 7.4 | 2021-06-28 | Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to high… |
CVE-2020-15138 | High | 7.1 | 2020-08-07 | Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary co… |
CVE-2021-3801 | Medium | 6.5 | 2021-09-15 | prism is vulnerable to Inefficient Regular Expression Complexity |
CVE-2024-53382 | Medium | 4.9 | 2025-03-03 | Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript)… |