Read the docs

highlightjs

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

highlightjs records in CISA KEV

No highlightjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Highlight.js · all components

TI-2020-16058 CVE-2020-26237 · GHSA-vfrc-7r7c-w9mx

Prototype Pollution in highlight.js

Priority MEDIUM 40

Highlight.js is a syntax highlighter written in JavaScript.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.01329 Published 2020-11-24 Fixed in 9.18.2, 10.1.2 CWE-471
Open these records in search →