Login Request a demo
PR
Product
Prism
by Prismjs · last CVE Mar 3, 2025
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Prism to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-23341
7.5
3%
Feb 18
The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components
Affected: before 1.23.0
CVE-2021-3801
6.5
1%
Sep 15
prism is vulnerable to Inefficient Regular Expression Complexity
Affected: before 1.25.0
CVE-2021-32723
6.5
1%
Jun 28
Prism is a syntax highlighting library
Affected: before 1.24.0
CVE-2022-23647
6.1
1%
Feb 18
Prism is a syntax highlighting library
Affected: 1.14.0 before 1.27.0
CVE-2024-53382
5.4
0%
Mar 3
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because…
Affected: through 1.29.0
Showing 5