{
  "cveId": "CVE-2024-53382",
  "url": "https://patchblox.com/security/cve/CVE-2024-53382",
  "summary": "CVE-2024-53382 is fixed in node-prismjs on 1 platform by DEBIAN-CVE-2024-53382 (version 1.30.0\u002Bdfsg\u002B~1.26.5-1), released March 3, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "node-prismjs: Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML b...",
  "description": "Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.",
  "published": "2025-03-03T07:15:33Z",
  "severity": "medium",
  "cvss": 5.4,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
  "epss": 0.00342,
  "epssPercentile": 0.27832,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "node-prismjs",
      "release": "Debian 14",
      "fixedVersion": "1.30.0\u002Bdfsg\u002B~1.26.5-1",
      "fix": "DEBIAN-CVE-2024-53382",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-53382",
      "released": "2025-03-03T07:15:33Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}