Cross-site Scripting in Mermaid

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-35513 · ADVISORY
• mermaid-js/mermaid · WEB
• mermaid-js/mermaid#2123 · WEB
• mermaid-js/mermaid#2123 · WEB
• mermaid-js/mermaid release 8.11.0-rc2 · WEB

mermaid의 다른 취약점

• CVE-2026-41159보통 5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermai…
• CVE-2026-41150보통 5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, there i…
• CVE-2025-54880보통 6.1Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify…
• CVE-2022-31108보통 6.1Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify…
• CVE-2021-43861보통 5.4Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify…