StackPrism

Backend framework

Prisma: latest release and open vulnerabilities today

The latest release of the prisma package is 8.0.0-rc.23. No advisories for Prisma were published in the last 12 months.

Last checked against npm, OSV.dev and deps.dev.

Check my repoDesign a stack with Prisma
Latest prisma release
8.0.0-rc.23
npm downloads last week
19M
GitHub stars
47.7k
Licence
Apache-2.0
OpenSSF Scorecard
6.7 / 10

Security advisories

OSV.dev, CISA KEV and FIRST EPSS

No advisories published in the last 12 months. Checked packages: prisma and @prisma/client.

All prisma advisories on OSV.devAll @prisma/client advisories on OSV.dev

Maintenance and supply chain

OpenSSF Scorecard 6.7 / 10 (scored )

The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 0 issue updates found in the last 90 days.

Weakest checks

  • Over-privileged CI tokens (Token-Permissions 0/10)
  • No fuzzing (Fuzzing 0/10)
  • No OpenSSF best-practices badge (CII-Best-Practices 0/10)

Full ScorecardSource repository

Production checklist

Prisma production checklist: 5 checks before launch

  • Must do: Never pass user input to $queryRawUnsafe or $executeRawUnsafe
  • Should do: Apply migrations with prisma migrate deploy in CI, never migrate dev in production
  • Should do: Leave password hashes and tokens out of query results
See all 5 checks with how to verify each

Docs and release notes

Check Prisma in your own stack

This page checks Prisma in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.

Check my repoDesign a stack with Prisma