prism

Releases33

Frequency4 weeks 2 hours

Last Release4 months ago

Downloads161M

Prism Ruby parser

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2024-53382NVD↗	<= 1.29.0	Mar 3, 2025Monday, 3 March 2025, 07:15	4.9 MEDIUM	—
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.