CVE-2020-15138
1 advisory.
npm/prismjs CVE-2020-15138: high 7.1, EPSS 2.04%
Cross-Site Scripting in Prism
Action: Upgrade prismjs to 1.21.0 or later.
npm i prismjs@1.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 1.21.0 | - |
Fixed versions
| 1.21.0 |
Sources
- osv: GHSA-wvhm-4hhf-97x9
- https://github.com/PrismJS/prism/security/advisories/GHSA-wvhm-4hhf-97x9
- https://nvd.nist.gov/vuln/detail/CVE-2020-15138
- https://github.com/PrismJS/prism/pull/2506/commits/7bd7de05edf71112a3a77f87901a2409c9c5c20c
- https://prismjs.com/plugins/previewers/#disabling-a-previewer
CVE-2020-15138 · published · modified · JSON