{"id":2192111,"name":"prismjs","ecosystem":"npm","description":"Lightweight, robust, elegant syntax highlighting.","homepage":"https://github.com/PrismJS/prism#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/PrismJS/prism","keywords_array":["prism","highlight"],"namespace":null,"versions_count":39,"first_release_published_at":"2015-05-13T00:37:38.541Z","latest_release_published_at":"2025-03-10T17:56:20.460Z","latest_release_number":"1.30.0","latest_published_release_number":"2.0.0-alpha.1","last_synced_at":"2026-10-24T01:22:53.880Z","created_at":"2022-04-09T22:17:23.481Z","updated_at":"2026-10-24T13:17:49.088Z","registry_url":"https://www.npmjs.com/package/prismjs","install_command":"npm install prismjs","documentation_url":null,"metadata":{"funding":{"url":"https://opencollective.com/prismjs","type":"opencollective"},"dist-tags":{"latest":"1.30.0","alpha":"2.0.0-alpha.1"},"contentPolicy":null},"repo_metadata":{"id":37401079,"uuid":"4979467","full_name":"PrismJS/prism","owner":"PrismJS","description":"Lightweight, robust, elegant syntax highlighting.","archived":false,"fork":false,"pushed_at":"2026-10-15T12:41:23.000Z","size":15083,"stargazers_count":13050,"open_issues_count":514,"forks_count":1406,"subscribers_count":122,"default_branch":"v2","last_synced_at":"2026-10-19T03:18:42.154Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://prismjs.com","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/PrismJS.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","accessibility":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"open_collective":"prismjs"}},"created_at":"2012-07-10T19:47:14.000Z","updated_at":"2026-10-17T21:36:53.000Z","dependencies_parsed_at":"2026-10-19T02:48:55.777Z","dependency_job_id":null,"html_url":"https://github.com/PrismJS/prism","commit_stats":{"total_commits":2993,"total_committers":410,"mean_commits":7.3,"dds":0.7340461075843635,"last_synced_commit":"59e5a3471377057de1f401ba38337aca27b80e03"},"previous_names":["leaverou/prism"],"tags_count":43,"template":false,"template_full_name":null,"purl":"pkg:github/PrismJS/prism","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/PrismJS","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/refs/heads/v2","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/sbom","scorecard":{"id":17520,"data":{"date":"2025-08-11","repo":{"name":"github.com/PrismJS/prism","commit":"328f5798dbb69ae410d9921d9f1d62ae149c5424"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Code-Review","score":9,"reason":"Found 25/27 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/danger.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test.yml:10","Warn: no topLevel permission defined: .github/workflows/website-rebuild.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":10,"reason":"25 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/danger.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/danger.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/PrismJS/prism/test.yml/v2?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   6 out of   6 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'v2'","Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T16:06:54.390Z","repository_id":37401079,"created_at":"2025-08-14T16:06:54.390Z","updated_at":"2025-08-14T16:06:54.390Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38350671,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-19T02:00:06.414Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"PrismJS","name":"Prism.js","uuid":"11140484","kind":"organization","description":"","email":null,"website":"https://prismjs.com","location":"IN UR CODEZ","twitter":"prismjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/11140484?v=4","repositories_count":4,"last_synced_at":"2026-10-23T13:08:27.721Z","metadata":{"has_sponsors_listing":false,"funding":{"open_collective":"prismjs"}},"html_url":"https://github.com/PrismJS","funding_links":["https://opencollective.com/prismjs"],"total_stars":13377,"followers":147,"following":0,"created_at":"2022-11-02T16:20:42.702Z","updated_at":"2026-10-23T13:08:27.731Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/PrismJS","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/PrismJS/repositories"},"tags":[{"name":"v2.0.0-alpha.1","sha":"36ad7f8bbb807d02b6b6c2837fe2a312fc473be6","kind":"tag","published_at":"2026-09-08T13:43:46.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v2.0.0-alpha.1","html_url":"https://github.com/PrismJS/prism/releases/tag/v2.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v2.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v2.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v2.0.0-alpha.1/manifests"},{"name":"v1.30.0","sha":"76dde18a575831c91491895193f56081ac08b0c5","kind":"tag","published_at":"2025-03-10T17:56:28.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.30.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.30.0/manifests"},{"name":"v1.29.0","sha":"59e5a3471377057de1f401ba38337aca27b80e03","kind":"tag","published_at":"2022-08-23T10:41:49.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.29.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"293dce42ff8911b508cb904a6f7a6b3283e1e85c","kind":"tag","published_at":"2022-04-17T12:21:13.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.28.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.28.0/manifests"},{"name":"v1.27.0","sha":"703881e14bf7530b180fad6052e535d0085315cd","kind":"tag","published_at":"2022-02-17T21:38:46.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.27.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.27.0/manifests"},{"name":"v1.26.0","sha":"0b6b1e2f0bd520d1396a942fa025ae811bc39383","kind":"tag","published_at":"2022-01-06T17:49:21.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.26.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.26.0/manifests"},{"name":"v1.25.0","sha":"99d94fa7c39d5aabee38ae0e729c330146820b4d","kind":"tag","published_at":"2021-09-16T16:17:24.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.25.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.25.0/manifests"},{"name":"v1.24.1","sha":"0fd01ea1fcd266b0332db9e8da17f87f7d52010d","kind":"tag","published_at":"2021-07-03T11:48:40.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.24.1","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.24.1/manifests"},{"name":"v1.24.0","sha":"3432b4b1e4440d6592ed82b6b5b9e72f660e43a8","kind":"tag","published_at":"2021-06-27T20:03:35.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.24.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.24.0/manifests"},{"name":"v1.23.0","sha":"88a17b4ff586c8bbd0faf1b1524cee9e039fa580","kind":"tag","published_at":"2020-12-31T18:46:48.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.23.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"38f42dd668a7bf388dfe0f5ed4b07aacb23b0255","kind":"tag","published_at":"2020-10-10T18:25:17.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.22.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"187c8a607ee70c7914682870156faa31ed01f001","kind":"tag","published_at":"2020-08-06T23:17:20.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.21.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.21.0/manifests"},{"name":"v1.20.0","sha":"81670053da263b0fe814d58de66213a43f439b98","kind":"tag","published_at":"2020-04-04T01:04:42.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.20.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"6fd5c96b90a7724b8b1dbad1c44c0ee70068f4f3","kind":"tag","published_at":"2020-01-13T13:39:40.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.19.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.19.0/manifests"},{"name":"v1.18.0","sha":"3c1fd1c84afd5e1867a9eb76e9533c53d22c34e1","kind":"tag","published_at":"2019-12-20T12:42:44.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.18.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.18.0/manifests"},{"name":"v1.17.1","sha":"aba55105897299e61815e873f8fcce7063227927","kind":"tag","published_at":"2019-07-22T02:08:31.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.17.1","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.17.1/manifests"},{"name":"v1.17.0","sha":"a70302771078958106f4a2408e5ee8678e8bae63","kind":"tag","published_at":"2019-07-22T02:05:51.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.17.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"886698d5b759ef46162a5723a2493f97c689dc94","kind":"tag","published_at":"2019-03-24T23:00:38.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.16.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"7d084d5f17fa40d3451d46cac605308382c9c499","kind":"commit","published_at":"2018-06-17T01:48:52.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.15.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.15.0/manifests"},{"name":"v1.14.0","sha":"435eb2e6cd94948627b044255aab7605235bdfa5","kind":"commit","published_at":"2018-04-11T07:02:17.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.14.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.14.0/manifests"},{"name":"v1.13.0","sha":"595d173837f6cbe4be0051cc4914e8aaa8256fe3","kind":"commit","published_at":"2018-03-21T07:26:28.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.13.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.13.0/manifests"},{"name":"v1.12.2","sha":"bc2b70f82a1d293e998771d6b51ddcf55649672f","kind":"commit","published_at":"2018-03-08T22:44:07.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.12.2","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.12.2/manifests"},{"name":"v1.12.1","sha":"ee4cd1dd4fcee88e7791b0962fbe13754059bc54","kind":"commit","published_at":"2018-03-08T22:24:37.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.12.1","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"92ffeb236237221197ed3dcf08d937d7a2de7e40","kind":"commit","published_at":"2018-03-07T20:42:43.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.12.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.12.0/manifests"},{"name":"v1.11.0","sha":"11f55176a701a60e0da781a2774ca4ef7402814c","kind":"commit","published_at":"2018-02-05T07:52:55.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.11.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"1e5bcf7cc05bc0eaa34caa43d122686b8faf1fce","kind":"commit","published_at":"2018-01-17T22:50:27.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.10.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.10.0/manifests"},{"name":"v1.9.0","sha":"a2f60f07d169398da7d60338c0771bb58815fa84","kind":"commit","published_at":"2017-12-05T23:45:49.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.9.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.9.0/manifests"},{"name":"v1.8.4","sha":"7741755a85f52e0d84ee88dfe91d755a4e21cd6f","kind":"commit","published_at":"2017-11-05T16:31:35.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.8.4","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.8.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.8.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.4/manifests"},{"name":"v1.8.3","sha":"f6f9cdaf3e80cd14c5d4954473116a153c641a0c","kind":"commit","published_at":"2017-10-19T19:52:11.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.8.3","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.8.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.3/manifests"},{"name":"v1.8.2","sha":"c862fdf1e9ccae4d9e5b1fd86fc28ff0c461b45a","kind":"commit","published_at":"2017-10-19T19:34:46.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.8.2","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.2/manifests"},{"name":"v1.8.1","sha":"e76cd720fd1315153e54a686ed464a8b9ee34dc8","kind":"commit","published_at":"2017-09-16T11:31:43.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.8.1","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.1/manifests"},{"name":"v1.8.0","sha":"e612e5d731e85a1dda9c5161bc13e5ddb51130db","kind":"commit","published_at":"2017-09-16T11:23:02.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.8.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.8.0/manifests"},{"name":"v1.7.0","sha":"43fcb680fa0b6c37dd8f69b67f2dc8fcaccd5af6","kind":"commit","published_at":"2017-09-09T13:13:21.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.7.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.7.0/manifests"},{"name":"v1.6.0","sha":"22df673c472d52fbd1f9ab2656c7186fcbc47c0b","kind":"commit","published_at":"2016-12-03T13:11:25.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.6.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.6.0/manifests"},{"name":"1.5.1","sha":"4a44f01606dbc88ac49accce9cd0cd7cb2fe213d","kind":"commit","published_at":"2016-06-05T05:39:15.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/1.5.1","html_url":"https://github.com/PrismJS/prism/releases/tag/1.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@1.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/1.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/1.5.1/manifests"},{"name":"1.5.0","sha":"f4912eed9225c0acf974e53f3d1e3f962d3e7ddf","kind":"commit","published_at":"2016-05-01T08:30:33.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/1.5.0","html_url":"https://github.com/PrismJS/prism/releases/tag/1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/1.5.0/manifests"},{"name":"v1.4.1","sha":"97b0eb5a1a74760c5c0f37f82116679b33876634","kind":"commit","published_at":"2016-02-03T14:51:12.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.4.1","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.4.1/manifests"},{"name":"1.4.0","sha":"4562b18d74c7c22a104eaf4a8f5f0177304f4dd6","kind":"commit","published_at":"2016-02-03T13:06:01.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/1.4.0","html_url":"https://github.com/PrismJS/prism/releases/tag/1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/1.4.0/manifests"},{"name":"v1.3.0","sha":"ad97b23be583f01e84ec5f17197d2c2b109ca7d0","kind":"commit","published_at":"2015-10-26T21:36:04.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.3.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"0924b070349284d8a705ad9ff2c70fbdb43e76bf","kind":"commit","published_at":"2015-10-07T06:03:31.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.2.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"a6c0d028fdbfc4fca733ad42f86b60189b3772f0","kind":"commit","published_at":"2015-10-04T14:55:52.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.1.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"ed9d7e354c20a95755af7641e3a2a0c77a713791","kind":"commit","published_at":"2015-07-26T09:26:07.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.0.1","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"534f34cd35526481e4a32ac4d1eaf447a5a64bf2","kind":"commit","published_at":"2015-05-23T08:26:08.000Z","download_url":"https://codeload.github.com/PrismJS/prism/tar.gz/v1.0.0","html_url":"https://github.com/PrismJS/prism/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/PrismJS/prism@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-10-24T01:23:08.275Z","dependent_packages_count":6937,"downloads":125283218,"downloads_period":"last-month","dependent_repos_count":218739,"rankings":{"downloads":0.0456969315975253,"dependent_repos_count":0.07220060432754596,"dependent_packages_count":0.013553014464215115,"stargazers_count":0.9390733133205049,"forks_count":1.0656502544681141,"docker_downloads_count":0.0567857616137013,"average":0.36549331329860113},"purl":"pkg:npm/prismjs","advisories":[{"uuid":"GSA_kwCzR0hTQS14N2hyLXc1cjItaDZ3Z84ABE9E","url":"https://github.com/advisories/GHSA-x7hr-w5r2-h6wg","title":"PrismJS DOM Clobbering vulnerability","description":"Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-03-03T09:30:34.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-53382","https://gist.github.com/jackfromeast/aeb128e44f05f95828a1a824708df660","https://github.com/PrismJS/prism/blob/59e5a3471377057de1f401ba38337aca27b80e03/prism.js#L226-L259","https://github.com/PrismJS/prism/pull/3863","https://github.com/PrismJS/prism/commit/8e8b9352dac64457194dd9e51096b4772532e53d","https://github.com/advisories/GHSA-x7hr-w5r2-h6wg"],"source_kind":"github","identifiers":["GHSA-x7hr-w5r2-h6wg","CVE-2024-53382"],"repository_url":"https://github.com/PrismJS/prism","blast_radius":0.0,"created_at":"2025-03-03T21:07:45.970Z","updated_at":"2026-10-12T12:11:36.990Z","epss_percentage":0.00342,"epss_percentile":0.25555,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14N2hyLXc1cjItaDZ3Z84ABE9E","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14N2hyLXc1cjItaDZ3Z84ABE9E","packages":[{"ecosystem":"npm","package_name":"prismjs","versions":[{"first_patched_version":"1.30.0","vulnerable_version_range":"\u003c 1.30.0"}],"purl":"pkg:npm/prismjs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14N2hyLXc1cjItaDZ3Z84ABE9E/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zOTQ5LWY0OTQtY205Oc0uIQ","url":"https://github.com/advisories/GHSA-3949-f494-cm99","title":"Cross-site Scripting in Prism","description":"### Impact\nPrism's [Command line plugin](https://prismjs.com/plugins/command-line/) can be used by attackers to achieve an XSS attack. The Command line plugin did not properly escape its output, leading to the input text being inserted into the DOM as HTML code.\n\nServer-side usage of Prism is not impacted. Websites that do not use the Command Line plugin are also not impacted.\n\n### Patches\nThis bug has been fixed in v1.27.0.\n\n### Workarounds\nDo not use the Command line plugin on untrusted inputs, or sanitized all code blocks (remove all HTML code text) from all code blocks that use the Command line plugin.\n\n### References\n- https://github.com/PrismJS/prism/pull/3341","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-02-22T19:32:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L","references":["https://github.com/PrismJS/prism/security/advisories/GHSA-3949-f494-cm99","https://nvd.nist.gov/vuln/detail/CVE-2022-23647","https://github.com/PrismJS/prism/pull/3341","https://github.com/PrismJS/prism/commit/e002e78c343154e1c0ddf9d6a0bb85689e1a5c7c","https://github.com/advisories/GHSA-3949-f494-cm99"],"source_kind":"github","identifiers":["GHSA-3949-f494-cm99","CVE-2022-23647"],"repository_url":"https://github.com/PrismJS/prism","blast_radius":0.0,"created_at":"2022-12-21T16:12:35.407Z","updated_at":"2026-10-24T12:15:18.576Z","epss_percentage":0.01425,"epss_percentile":0.72522,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zOTQ5LWY0OTQtY205Oc0uIQ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zOTQ5LWY0OTQtY205Oc0uIQ","packages":[{"ecosystem":"npm","package_name":"prismjs","versions":[{"first_patched_version":"1.27.0","vulnerable_version_range":"\u003e= 1.14.0, \u003c 1.27.0"}],"purl":"pkg:npm/prismjs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zOTQ5LWY0OTQtY205Oc0uIQ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ocWhwLTVwODMtaHg5Ns0Vzg","url":"https://github.com/advisories/GHSA-hqhp-5p83-hx96","title":"prismjs Regular Expression Denial of Service vulnerability","description":"Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS (regular expression denial of service). An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-09-20T20:44:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-3801","https://github.com/prismjs/prism/commit/0ff371bb4775a131634f47d0fe85794c547232f9","https://huntr.dev/bounties/8c16ab31-6eb6-46d1-b9a4-387222fe1b8a","https://github.com/advisories/GHSA-hqhp-5p83-hx96"],"source_kind":"github","identifiers":["GHSA-hqhp-5p83-hx96","CVE-2021-3801"],"repository_url":"https://github.com/prismjs/prism","blast_radius":0.0,"created_at":"2022-12-21T16:12:46.698Z","updated_at":"2026-10-24T12:15:42.612Z","epss_percentage":0.01036,"epss_percentile":0.63559,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocWhwLTVwODMtaHg5Ns0Vzg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ocWhwLTVwODMtaHg5Ns0Vzg","packages":[{"ecosystem":"npm","package_name":"prismjs","versions":[{"first_patched_version":"1.25.0","vulnerable_version_range":"\u003c 1.25.0"}],"purl":"pkg:npm/prismjs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocWhwLTVwODMtaHg5Ns0Vzg/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqNzctNTl3aC02Nmhn","url":"https://github.com/advisories/GHSA-gj77-59wh-66hg","title":"Regular Expression Denial of Service (ReDoS) in Prism","description":"Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS).\n\n### Impact\n\nWhen Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. Do not use the following languages to highlight untrusted text.\n\n- ASCIIDoc\n- ERB\n\nOther languages are __not__ affected and can be used to highlight untrusted text.\n\n### Patches\nThis problem has been fixed in Prism v1.24.\n\n### References\n\n- PrismJS/prism#2774\n- PrismJS/prism#2688\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-06-28T18:33:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","references":["https://github.com/PrismJS/prism/security/advisories/GHSA-gj77-59wh-66hg","https://github.com/PrismJS/prism/pull/2688","https://github.com/PrismJS/prism/pull/2774","https://github.com/PrismJS/prism/commit/d85e30da6755fdbe7f8559f8e75d122297167018","https://nvd.nist.gov/vuln/detail/CVE-2021-32723","https://www.oracle.com/security-alerts/cpujan2022.html","https://github.com/advisories/GHSA-gj77-59wh-66hg"],"source_kind":"github","identifiers":["GHSA-gj77-59wh-66hg","CVE-2021-32723"],"repository_url":"https://github.com/PrismJS/prism","blast_radius":0.0,"created_at":"2022-12-21T16:12:58.215Z","updated_at":"2026-10-24T12:15:56.623Z","epss_percentage":0.01421,"epss_percentile":0.72606,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqNzctNTl3aC02Nmhn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqNzctNTl3aC02Nmhn","packages":[{"ecosystem":"npm","package_name":"prismjs","versions":[{"first_patched_version":"1.24.0","vulnerable_version_range":"\u003c 1.24.0"}],"purl":"pkg:npm/prismjs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdqNzctNTl3aC02Nmhn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0aHItN2ZnMy1oMzV3","url":"https://github.com/advisories/GHSA-h4hr-7fg3-h35w","title":"Denial of service in prismjs","description":"The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the `prism-asciidoc`, `prism-rest`, `prism-tap` and `prism-eiffel` components.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-03-01T19:52:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-23341","https://github.com/PrismJS/prism/issues/2583","https://github.com/PrismJS/prism/pull/2584","https://github.com/PrismJS/prism/commit/c2f6a64426f44497a675cb32dccb079b3eff1609","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1076583","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076582","https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581","https://www.npmjs.com/package/prismjs","https://github.com/advisories/GHSA-h4hr-7fg3-h35w"],"source_kind":"github","identifiers":["GHSA-h4hr-7fg3-h35w","CVE-2021-23341"],"repository_url":"https://github.com/PrismJS/prism","blast_radius":0.0,"created_at":"2022-12-21T16:13:11.417Z","updated_at":"2026-10-12T12:18:39.705Z","epss_percentage":0.03167,"epss_percentile":0.87511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0aHItN2ZnMy1oMzV3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0aHItN2ZnMy1oMzV3","packages":[{"ecosystem":"npm","package_name":"prismjs","versions":[{"first_patched_version":"1.23.0","vulnerable_version_range":"\u003c 1.23.0"}],"purl":"pkg:npm/prismjs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg0aHItN2ZnMy1oMzV3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd2aG0tNGhoZi05N3g5","url":"https://github.com/advisories/GHSA-wvhm-4hhf-97x9","title":"Cross-Site Scripting in Prism","description":"### Impact\nThe easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer.\n\nThis impacts all Safari and Internet Explorer users of Prism \u003e=v1.1.0 that use the _Previewers_ plugin (\u003e=v1.10.0) or the _Previewer: Easing_ plugin (v1.1.0 to v1.9.0).\n\n### Patches\nThis problem is patched in v1.21.0.\n\n### Workarounds\nTo workaround the issue without upgrading, [disable the easing preview](https://prismjs.com/plugins/previewers/#disabling-a-previewer) on all impacted code blocks. You need Prism v1.10.0 or newer to apply this workaround.\n\n### References\nThe vulnerability was introduced by this [commit](https://github.com/PrismJS/prism/commit/4303c940d3d3a20e8ce7635bf23331c75060f5c5) on Sep 29, 2015 and fixed by [Masato Kinugawa](https://twitter.com/kinugawamasato) (#2506).\n\n### For more information\nIf you have any questions or comments about this advisory, please [open an issue](https://github.com/PrismJS/prism/issues).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-08-07T22:28:30.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","references":["https://github.com/PrismJS/prism/security/advisories/GHSA-wvhm-4hhf-97x9","https://github.com/PrismJS/prism/pull/2506/commits/7bd7de05edf71112a3a77f87901a2409c9c5c20c","https://prismjs.com/plugins/previewers/#disabling-a-previewer","https://nvd.nist.gov/vuln/detail/CVE-2020-15138","https://github.com/advisories/GHSA-wvhm-4hhf-97x9"],"source_kind":"github","identifiers":["GHSA-wvhm-4hhf-97x9","CVE-2020-15138"],"repository_url":"https://github.com/PrismJS/prism","blast_radius":0.0,"created_at":"2022-12-21T16:13:22.973Z","updated_at":"2026-10-24T12:16:50.462Z","epss_percentage":0.02041,"epss_percentile":0.80513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd2aG0tNGhoZi05N3g5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd2aG0tNGhoZi05N3g5","packages":[{"ecosystem":"npm","package_name":"prismjs","versions":[{"first_patched_version":"1.21.0","vulnerable_version_range":"\u003e= 1.1.0, \u003c 1.21.0"}],"purl":"pkg:npm/prismjs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd2aG0tNGhoZi05N3g5/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/prismjs","docker_dependents_count":2091,"docker_downloads_count":934320488,"usage_url":"https://repos.ecosyste.ms/usage/npm/prismjs","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/prismjs/dependencies","status":null,"funding_links":["https://opencollective.com/prismjs"],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-23T13:00:54.568Z","issues_count":319,"pull_requests_count":398,"avg_time_to_close_issue":20894865.376623377,"avg_time_to_close_pull_request":5356889.459574468,"issues_closed_count":77,"pull_requests_closed_count":235,"pull_request_authors_count":118,"issue_authors_count":268,"avg_comments_per_issue":2.197492163009404,"avg_comments_per_pull_request":2.135678391959799,"merged_pull_requests_count":172,"bot_issues_count":0,"bot_pull_requests_count":31,"past_year_issues_count":34,"past_year_pull_requests_count":96,"past_year_avg_time_to_close_issue":2773989.125,"past_year_avg_time_to_close_pull_request":2025866.5714285714,"past_year_issues_closed_count":8,"past_year_pull_requests_closed_count":56,"past_year_pull_request_authors_count":40,"past_year_issue_authors_count":22,"past_year_avg_comments_per_issue":0.35294117647058826,"past_year_avg_comments_per_pull_request":2.1145833333333335,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":8,"past_year_merged_pull_requests_count":45,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/PrismJS%2Fprism/issues","maintainers":[{"login":"DmitrySharabin","count":55,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DmitrySharabin"},{"login":"LeaVerou","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/LeaVerou"},{"login":"RunDevelopment","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/RunDevelopment"},{"login":"robert-j-webb","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/robert-j-webb"},{"login":"JaKXz","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JaKXz"},{"login":"mAAdhaTTah","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mAAdhaTTah"}],"active_maintainers":[{"login":"DmitrySharabin","count":52,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DmitrySharabin"},{"login":"LeaVerou","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/LeaVerou"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/prismjs/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/prismjs/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/prismjs/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/prismjs/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/prismjs/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/prismjs/codemeta","maintainers":[{"uuid":"leaverou","login":"leaverou","name":null,"email":"lea@verou.me","url":null,"packages_count":81,"html_url":"https://www.npmjs.com/~leaverou","role":null,"created_at":"2022-11-10T11:26:08.224Z","updated_at":"2022-11-10T11:26:08.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/leaverou/packages"},{"uuid":"rdy","login":"rdy","name":null,"email":"ryan.dy@gmail.com","url":null,"packages_count":109,"html_url":"https://www.npmjs.com/~rdy","role":null,"created_at":"2022-11-10T11:26:08.226Z","updated_at":"2022-11-10T11:26:08.226Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/rdy/packages"},{"uuid":"vinsonchuong","login":"vinsonchuong","name":null,"email":"vinsonchuong@gmail.com","url":null,"packages_count":152,"html_url":"https://www.npmjs.com/~vinsonchuong","role":null,"created_at":"2022-11-10T11:26:08.228Z","updated_at":"2022-11-10T11:26:08.228Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/vinsonchuong/packages"},{"uuid":"gpleiss","login":"gpleiss","name":null,"email":"gpleiss@gmail.com","url":null,"packages_count":87,"html_url":"https://www.npmjs.com/~gpleiss","role":null,"created_at":"2022-11-10T11:26:08.231Z","updated_at":"2022-11-10T11:26:08.231Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/gpleiss/packages"},{"uuid":"jamesdigioia","login":"jamesdigioia","name":null,"email":"jamesorodig@gmail.com","url":null,"packages_count":31,"html_url":"https://www.npmjs.com/~jamesdigioia","role":null,"created_at":"2022-11-10T11:26:08.233Z","updated_at":"2022-11-10T11:26:08.233Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/jamesdigioia/packages"},{"uuid":"golmote","login":"golmote","name":null,"email":"golmote@gmail.com","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~golmote","role":null,"created_at":"2022-11-10T11:26:08.235Z","updated_at":"2022-11-10T11:26:08.235Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/golmote/packages"},{"uuid":"rundevelopment","login":"rundevelopment","name":null,"email":"mitchi5000.ms@googlemail.com","url":null,"packages_count":11,"html_url":"https://www.npmjs.com/~rundevelopment","role":null,"created_at":"2022-11-10T11:26:08.237Z","updated_at":"2022-11-10T11:26:08.237Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/rundevelopment/packages"},{"uuid":"dmitrysharabin","login":"dmitrysharabin","name":null,"email":"dmitrysharabin@gmail.com","url":null,"packages_count":34,"html_url":"https://www.npmjs.com/~dmitrysharabin","role":null,"created_at":"2025-03-11T12:08:14.115Z","updated_at":"2025-03-11T12:08:14.115Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/dmitrysharabin/packages"}]}