Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

mermaid

npm

Markdown-ish syntax for generating flowcharts and other diagrams.

View on github.com · View on npmjs.org

Security Advisories for mermaid in npm

Moderate
3 months ago

Mermaid radar diagrams are vulnerable to DoS GSA_kwCzR0hTQS1yaGgzLWpwZzYtNjZ4aM4ABhoO

npm mermaid
Low
3 months ago

Mermaid configuration APIs allow prototype pollution GSA_kwCzR0hTQS1jNGMzLXBnNjQtNG00ds4ABhoN

npm mermaid
Moderate
3 months ago

Mermaid allows CSS injection applying to sibling elements of the diagram GSA_kwCzR0hTQS02eDY0LTl4NjItZjJneM4ABhoM

npm mermaid
Moderate
3 months ago

Mermaid Architecture diagrams are vulnerable to prototype pollution GSA_kwCzR0hTQS0zcnJyLWpyOWotaDNxM84ABhoL

npm mermaid
Moderate
3 months ago

Mermaid XY Charts are vulnerable to an infinite loop DoS GSA_kwCzR0hTQS0ydjhwLTNmMmotNW1wN84ABhoJ

npm mermaid
Moderate
6 months ago

Mermaid: Improper sanitization of configuration leads to CSS injection GSA_kwCzR0hTQS04N2Y5LWh2bXctZ2g0cM4ABWmR

npm mermaid
Moderate
6 months ago

Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS GSA_kwCzR0hTQS02bTZjLTM2ZjctZmh4aM4ABWmQ

npm mermaid
Moderate
6 months ago

Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection GSA_kwCzR0hTQS1naGNtLXhxZnctcTR2cs4ABWmP

npm mermaid
Moderate
6 months ago

Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection GSA_kwCzR0hTQS14Y2o5LTVtMmgtNjQ4cs4ABWmO

npm mermaid
Moderate
about 1 year ago

Mermaid improperly sanitizes sequence diagram labels leading to XSS GSA_kwCzR0hTQS03cnFxLXBydnAteDlqaM4ABLOC

npm mermaid
Moderate
about 1 year ago

Mermaid does not properly sanitize architecture diagram iconText leading to XSS GSA_kwCzR0hTQS04Z3dtLTU4Zzktajhwd84ABLOB

npm mermaid
High
about 2 years ago

Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify GSA_kwCzR0hTQS1tNGdxLXgyNGotanBtZs4ABAkl

npm mermaid
Moderate
over 4 years ago

Possible inject arbitrary `CSS` into the generated graph affecting the container HTML GSA_kwCzR0hTQS14M3ZtLTM4aHctNTV3Zs4AAtGz

npm mermaid
High
almost 5 years ago

Incorrect sanitisation function leads to `XSS` in mermaid GSA_kwCzR0hTQS1wM3JwLXZtajktZ3Y2ds0g-Q

npm mermaid
Moderate
almost 5 years ago

Cross-site Scripting in Mermaid MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRmNngtNDlnMi05OWZt

npm mermaid
High
about 6 years ago

Cross-Site Scripting in mermaid MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczMmctNWhxcC1nZzZx

npm mermaid

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 12 High 3 Low 1