It was discovered that Highlight.js used plain JavaScript objects for
internal language name lookups, making them susceptible to prototype
pollution attacks. An attacker could use this to cause a denial of
service or unexpected application behaviour.
Intelligence View
⚡ tsecurity.de Intelligence
USN-8276-1: Highlight.js vulnerability
It was discovered that Highlight.js used plain JavaScript objects for internal language name lookups, making them susceptible to prototype pollution attacks. An attacker could use this to cause a denial of service or unexpected application…
Reagiere als Erste:r — dein Feedback zählt!