Astra Linux - уязвимость в highlight.js

Highlight.js is a syntax highlighter written in JavaScript. Versions of Highlight.js prior to 9.18.2 and 10.1.2 are vulnerable to “Prototype Pollution”. A malicious HTML code block can cause the base object’s prototype to be polluted during highlighting. If you allow users to insert custom HTML...

The vulnerability of the Highlight.js lighting syntax tool, related to modifications of expected data, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Highlight.js lighting syntax tool is related to modifications of assumed data. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures...