PrismJS

Products

Product	CVEs	Exploited	Latest
Prism	4	–	Mar 3, 2025
prismjs/prism	1	–	Sep 15, 2021

CVE-2024-53382 Medium 4.9 Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can 0.3%
CVE-2022-23647 High 7.5 Cross-site Scripting in Prism 1.4%
CVE-2021-3801 High 7.5 Inefficient Regular Expression Complexity in prismjs/prism 1.0%
CVE-2021-32723 High 7.4 Regular Expression Denial of Service (ReDoS) in Prism 1.4%
CVE-2020-15138 High 7.1 Cross-Site Scripting in Prism 2.0%