node-prismjs - Debian Package Tracker

general

source: node-prismjs (main)
version: 1.29.0+dfsg+~1.26.0-1
maintainer: Debian Javascript Maintainers (archive) (DMD)
uploaders: Pirate Praveen [DMD]
arch: all
std-ver: 4.6.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.23.0+dfsg-1+deb11u2
stable: 1.29.0+dfsg+~1.26.0-1
testing: 1.29.0+dfsg+~1.26.0-1
unstable: 1.29.0+dfsg+~1.26.0-1

versioned links

1.23.0+dfsg-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.29.0+dfsg+~1.26.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

node-prismjs

action needed

A new upstream version is available: 1.30.0+~1.26.5 high

A new upstream version 1.30.0+~1.26.5 is available, you should consider packaging it.

Created: 2024-02-28 Last update: 2025-05-24 09:31

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2024-53382: Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

Created: 2025-03-03 Last update: 2025-03-10 17:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2024-53382: Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

Created: 2025-03-03 Last update: 2025-03-10 17:30

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2024-53382: Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

Created: 2025-03-03 Last update: 2025-03-10 17:30

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2025-04-07 Last update: 2025-05-24 13:30

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 9096c8dae109b6a2ddb1265b945afded688fac9d
Author: Yadd <yadd@debian.org>
Date:   Mon Aug 29 10:54:36 2022 +0200

    Install examples

commit 4719b63ffbeab75a475a13db6f716d5467e4826c
Author: Yadd <yadd@debian.org>
Date:   Mon Aug 29 10:53:33 2022 +0200

    Update lintian overrides

Created: 2022-08-29 Last update: 2025-05-20 08:03

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2024-53382: (needs triaging) Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-03-03 Last update: 2025-03-10 17:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.6.1).

Created: 2022-12-17 Last update: 2025-02-27 13:24

news

[rss feed]

[2022-09-04] Accepted node-prismjs 1.29.0+dfsg+~1.26.0-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2022-09-04] node-prismjs 1.29.0+dfsg+~1.26.0-1 MIGRATED to testing (Debian testing watch)
[2022-05-21] node-prismjs 1.28.0+dfsg+~1.26.0-1 MIGRATED to testing (Debian testing watch)
[2022-05-19] Accepted node-prismjs 1.28.0+dfsg+~1.26.0-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2022-03-16] Accepted node-prismjs 1.23.0+dfsg-1+deb11u2 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Xavier Guimard)
[2022-02-21] node-prismjs 1.27.0+dfsg+~1.26.0-1 MIGRATED to testing (Debian testing watch)
[2022-02-19] Accepted node-prismjs 1.27.0+dfsg+~1.26.0-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2021-10-01] Accepted node-prismjs 1.23.0+dfsg-1+deb11u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Xavier Guimard)
[2021-09-23] node-prismjs 1.25.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2021-09-20] Accepted node-prismjs 1.25.0+dfsg-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2021-04-02] node-prismjs 1.23.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2021-03-13] Accepted node-prismjs 1.23.0+dfsg-1 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2020-08-25] node-prismjs 1.11.0+dfsg-4 MIGRATED to testing (Debian testing watch)
[2020-08-21] Accepted node-prismjs 1.11.0+dfsg-4 (source) into unstable (Xavier Guimard)
[2020-05-05] Accepted node-prismjs 1.11.0+dfsg-3~bpo10+1 (source all) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Praveen Arimbrathodiyil)
[2020-03-10] node-prismjs 1.11.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2020-03-08] Accepted node-prismjs 1.11.0+dfsg-3 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-11-20] Accepted node-prismjs 1.11.0+dfsg-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-11-20] Accepted node-prismjs 1.11.0+dfsg-1 (source all) into unstable, unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 2
RC: 0
I&N: 1
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.29.0+dfsg+~1.26.0-1