Incorrect sanitisation function leads to `XSS` in mermaid

概要

参考情報

• mermaid-js/mermaid security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2021-43861 · ADVISORY
• mermaid-js/mermaid commit 066b7a0 · WEB
• mermaid-js/mermaid · PACKAGE
• mermaid-js/mermaid release 8.13.8 · WEB

mermaid のその他の脆弱性

• CVE-2026-41159中 5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermai…
• CVE-2026-41150中 5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, there i…
• CVE-2025-54880中 6.1Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify…
• CVE-2022-31108中 6.1Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify…
• CVE-2021-35513中 6.1Mermaid before 8.11.0 allows XSS when the antiscript feature is used.