Debian/node-prismjs: high 7.5
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This
Action: Upgrade node-prismjs to 1.11.0+dfsg-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.0+dfsg-4 | - |
Fixed versions
| 1.11.0+dfsg-4 |
Sources
- osv: DEBIAN-CVE-2020-15138#Debian:14/node-prismjs
- https://security-tracker.debian.org/tracker/CVE-2020-15138
published · modified · JSON