search

filp / whoops

PHP errors for cool kids
http://filp.github.io/whoops/
MIT License
13.19k stars 604 forks source link

Upgrade prismJS due to a security issue #741

Closed MrHHyde closed 2 years ago

MrHHyde commented 2 years ago

Upgrade the prism JS & CSS to the latest version due to an open security issue in the current version

Found in https://nvd.nist.gov/vuln/detail/CVE-2021-3801 Patched in 1.29.0: https://github.com/PrismJS/prism/pull/3341

denis-sokolov commented 2 years ago

Thanks, released 2.14.6!

Hopefully nobody is using Whoops in a context where this would be a vector of attack in any way.