mermaid vulnerabilities (npm)
16 vulnerabilities.
-
mermaidnpm Mermaid radar diagrams are vulnerable to DoS 5.3 Medium -
mermaidnpm Mermaid configuration APIs allow prototype pollution 2.4 Low -
mermaidnpm Mermaid allows CSS injection applying to sibling elements of the diagram 5.3 Medium -
mermaidnpm Mermaid Architecture diagrams are vulnerable to prototype pollution 6.5 Medium -
mermaidnpm Mermaid XY Charts are vulnerable to an infinite loop DoS 5.3 Medium -
mermaidnpm Mermaid: Improper sanitization of configuration leads to CSS injection 5.3 Medium -
mermaidnpm Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS 5.3 Medium -
mermaidnpm Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection 5.3 Medium -
mermaidnpm Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection 5.3 Medium -
mermaidnpm Mermaid improperly sanitizes of sequence diagram labels leading to XSS 5.3 Medium -
mermaidnpm Mermaid does not properly sanitize architecture diagram iconText leading to XSS 5.1 Medium -
mermaidnpm Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify 7.0 High -
mermaidnpm Arbitrary `CSS` injection into the generated graph affecting the container HTML in mermaid.js 4.1 Medium -
mermaidnpm Incorrect sanitisation function leads to `XSS` 7.2 High -
mermaidnpm Cross-site Scripting in Mermaid 6.1 Medium -
mermaidnpm Cross-Site Scripting in mermaid No score