PrismJS vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20212
3. 20221
4. 20251

Newest CVEs

• CVE-2024-53382

  Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript),…

  PrismJS · Prism

  Medium4.9
• CVE-2022-23647

  Cross-site Scripting in Prism

  PrismJS · prism

  High7.5
• CVE-2021-3801

  Inefficient Regular Expression Complexity in prismjs/prism

  prismjs · prismjs/prism

  High7.5
• CVE-2021-32723

  Regular Expression Denial of Service (ReDoS) in Prism

  PrismJS · prism

  High7.4
• CVE-2020-15138

  Cross-Site Scripting in Prism

  PrismJS · prism

  High7.1