Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

mermaid

npm · Markdown-ish syntax for generating flowcharts, mindmaps, sequence diagrams, class diagrams, gantt charts, git graphs and more. · Repository · Package

Security Advisories for mermaid in npm

Moderate
about 1 month ago

Mermaid improperly sanitizes sequence diagram labels leading to XSS GSA_kwCzR0hTQS03cnFxLXBydnAteDlqaM4ABLOC

npm mermaid
Moderate
about 1 month ago

Mermaid does not properly sanitize architecture diagram iconText leading to XSS GSA_kwCzR0hTQS04Z3dtLTU4Zzktajhwd84ABLOB

npm mermaid
High
11 months ago

Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify GSA_kwCzR0hTQS1tNGdxLXgyNGotanBtZs4ABAkl

npm mermaid
Moderate
about 3 years ago

Possible inject arbitrary `CSS` into the generated graph affecting the container HTML GSA_kwCzR0hTQS14M3ZtLTM4aHctNTV3Zs4AAtGz

npm mermaid
High
over 3 years ago

Incorrect sanitisation function leads to `XSS` in mermaid GSA_kwCzR0hTQS1wM3JwLXZtajktZ3Y2ds0g-Q

npm mermaid
Moderate
almost 4 years ago

Cross-site Scripting in Mermaid MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRmNngtNDlnMi05OWZt

npm mermaid
High
about 5 years ago

Cross-Site Scripting in mermaid MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczMmctNWhxcC1nZzZx

npm mermaid

Filter by Severity

Moderate 4 High 3