2 matches found
USN-8276-1: Highlight.js vulnerability
It was discovered that Highlight.js used plain JavaScript objects for internal language name lookups, making them susceptible to prototype pollution attacks. An attacker could use this to cause a denial of service or unexpected application behaviour...
8.7CVSS6.9AI score0.01307EPSS
SaveExploits0
USN-8276-1 Highlight.js vulnerability
It was discovered that Highlight.js used plain JavaScript objects for internal language name lookups, making them susceptible to prototype pollution attacks. An attacker could use this to cause a denial of service or unexpected application behaviour...
8.7CVSS5.8AI score0.01307EPSS
SaveExploits0References2
20