{"action":"Upgrade prismjs to 1.21.0 or later.","affected":[{"fixed":"1.21.0","introduced":"1.1.0"}],"component":"prismjs","cve_ids":["CVE-2020-15138"],"ecosystem":"npm","epss":0.02041,"exploited":false,"fixed_versions":["1.21.0"],"ghsa_id":"GHSA-wvhm-4hhf-97x9","id":"tcs_01M5KGG1XXGEYVK57AMDJQFY83","modified_at":"2026-07-08T06:00:45.631865969Z","published_at":"2020-08-07T22:28:30Z","references":["https://osv.dev/vulnerability/GHSA-wvhm-4hhf-97x9","https://github.com/PrismJS/prism/security/advisories/GHSA-wvhm-4hhf-97x9","https://nvd.nist.gov/vuln/detail/CVE-2020-15138","https://github.com/PrismJS/prism/pull/2506/commits/7bd7de05edf71112a3a77f87901a2409c9c5c20c","https://prismjs.com/plugins/previewers/#disabling-a-previewer"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-wvhm-4hhf-97x9","url":"https://osv.dev/vulnerability/GHSA-wvhm-4hhf-97x9"}],"summary":"Cross-Site Scripting in Prism"}