{"action":"Upgrade prismjs to 1.30.0 or later.","affected":[{"fixed":"1.30.0","introduced":"0"}],"component":"prismjs","cve_ids":["CVE-2024-53382"],"ecosystem":"npm","epss":0.00342,"exploited":false,"fixed_versions":["1.30.0"],"ghsa_id":"GHSA-x7hr-w5r2-h6wg","id":"tcs_01M5KGH9PS1GWVEVRK1E611CEZ","modified_at":"2026-09-10T03:50:23.418597462Z","published_at":"2025-03-03T09:30:34Z","references":["https://osv.dev/vulnerability/GHSA-x7hr-w5r2-h6wg","https://nvd.nist.gov/vuln/detail/CVE-2024-53382","https://github.com/PrismJS/prism/pull/3863","https://github.com/PrismJS/prism/commit/8e8b9352dac64457194dd9e51096b4772532e53d","https://gist.github.com/jackfromeast/aeb128e44f05f95828a1a824708df660","https://github.com/PrismJS/prism","https://github.com/PrismJS/prism/blob/59e5a3471377057de1f401ba38337aca27b80e03/prism.js#L226-L259"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-x7hr-w5r2-h6wg","url":"https://osv.dev/vulnerability/GHSA-x7hr-w5r2-h6wg"}],"summary":"PrismJS DOM Clobbering vulnerability"}