`highlight.js`

Ecosystem:
npm

Package URL:
pkg:npm/highlight.js

Total PRs:
267 Dependabot PRs

Latest PR:
about 7 hours ago

Unique Repositories:
176 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

ReDOS vulnerabities: multiple grammars

GHSA-7wwv-vh3v-89cq MODERATE published almost 5 years ago • updated 5 months ago

### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking) [oswasp](https://owasp.org/www-community/attacks/Regul...

Prototype Pollution in highlight.js

GHSA-vfrc-7r7c-w9mx CVE-2020-26237 MODERATE published almost 5 years ago • updated 3 months ago

### Impact Affected versions of this package are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result i...

Recent PRs (filtered by: Open , Patch PRs )

RSS Feed Clear filter

build(deps): bump the npm_and_yarn group across 1 directory with 49 updates

sumit12690/components #1

10.4.0 → 10.4.1 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 32 updates

RLR-GitHub/coinos-ui #1

9.18.3 → 9.18.5 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 30 updates

MetaMask/statping #24

9.18.3 → 9.18.5 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 36 updates

hashim21223445/marktext #24

9.18.1 → 9.18.5 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 37 updates

hashim21223445/marktext #18

9.18.1 → 9.18.5 Patch PR

Open 2 months ago 2 comments

chore(deps-dev): bump highlight.js from 11.11.0 to 11.11.1

tegojs/tego-standard #30

11.11.0 → 11.11.1 Patch PR

Open 3 months ago

Bump the npm_and_yarn group across 1 directory with 24 updates

gusnuf/mermaid #1

9.18.1 → 9.18.5 Patch PR

Open 5 months ago

Bump the npm_and_yarn group across 1 directory with 28 updates

offsoc/Stormspotter #11

9.18.3 → 9.18.5 Patch PR

Open 5 months ago

Bump the npm_and_yarn group across 1 directory with 33 updates

sizzlebop/marktext #1

9.18.1 → 9.18.5 Patch PR

Open 5 months ago

build(deps): bump highlight.js from 9.18.1 to 9.18.5

sniperadmin/test-vue-electron #4

9.18.1 → 9.18.5 Patch PR

Open almost 5 years ago 2 comments

Package Details

Name:	`highlight.js`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/highlight.js`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 2

View All npm Advisories

Package Information

Description:

Syntax highlighting with language autodetection.

Repository:	https://github.com/highlightjs/highlight.js
Homepage:	https://highlightjs.org/
Latest Release:	`11.11.1` 10 months ago
Dependent Repos:	700,734
Dependent Packages:	11,299
Downloads:	45,814,735
Ranking:	Top 0.0436% by dependent repos Top 0.0488% by downloads Top 0.009% by dependent pkgs

PR Status

Open 116 (43.4%)

Merged 27 (10.1%)

Closed 102 (38.2%)

PR Types

Removal 3 (1.1%)

Minor 143 (53.6%)

Major 63 (23.6%)

Patch 33 (12.4%)