CVE-2026-126365 | withastro astrojs-prism/astrojs-markdoc Prism runHighlighterWithAstro lang cross site scripting

A vulnerability categorized as problematic has been discovered in withastro astrojs-prism and astrojs-markdoc. This affects the function runHighlighterWithAstro of the component Prism. Executing a manipulation of the argument lang can lead to cross site scripting.

This vulnerability is registered as CVE-2026-126365. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More