Known vulnerabilities in prism
Vendor:
PrismJS
Software:
prism
Software CPE:
cpe:2.3:a:PrismJS:prism:*:*:*:*:*:*:*:*
Website:
https://github.com/PrismJS
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU107489 - Improper Control of Generation of Code ('Code Injection') CVE-2024-53382 |
CWE-94 | Low | 1.30.0 | 16.04.2025 |
SB2025041637 SB2025041638 SB2025043033 and 8 more |
||
| #VU60729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-23647 |
CWE-79 | Low | 1.27.0 | 21.02.2022 |
SB2022022105 SB2022100650 SB2022111738 and 1 more |
||
| #VU59698 - Incorrect Regular Expression CVE-2021-32723 |
CWE-185 | Medium | 1.24.0 | 18.01.2022 |
SB2021062817 SB2022011822 |