ruby/prism

ruby/prism

GitHubGitHub
GitHubgithub.com
ruby.github.ioruby.github.io
Releases46
Frequency3 weeks 6 days
Last Release
Stars1.03K
Prism Ruby parser
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2024-53382NVD↗
<= 1.29.04.9 MEDIUM—

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.