CVE-2020-26237
1 advisory.
npm/highlight.js CVE-2020-26237: medium 5.8, EPSS 1.33%
Prototype Pollution in highlight.js
Action: Upgrade highlight.js to 9.18.2 or later.
npm i highlight.js@9.18.2npm i highlight.js@10.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.18.2 | - |
| 10.0.0 | 10.1.2 | - |
Fixed versions
| 9.18.2 | 10.1.2 |
Sources
- osv: GHSA-vfrc-7r7c-w9mx
- https://github.com/highlightjs/highlight.js/security/advisories/GHSA-vfrc-7r7c-w9mx
- https://nvd.nist.gov/vuln/detail/CVE-2020-26237
- https://github.com/highlightjs/highlight.js/pull/2636
- https://github.com/highlightjs/highlight.js/commit/7241013ae011a585983e176ddc0489a7a52f6bb0
- https://github.com/highlightjs/highlight.js
- https://lists.debian.org/debian-lts-announce/2020/12/msg00041.html
- https://www.npmjs.com/package/highlight.js
- https://www.oracle.com/security-alerts/cpujul2022.html
CVE-2020-26237 · published · modified · JSON