Incorrect sanitisation function leads to `XSS` in mermaid

Mô tả

Tham khảo

• mermaid-js/mermaid security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2021-43861 · ADVISORY
• mermaid-js/mermaid commit 066b7a0 · WEB
• mermaid-js/mermaid · PACKAGE
• mermaid-js/mermaid release 8.13.8 · WEB

Lỗ hổng khác của mermaid

• CVE-2026-41159TRUNG BÌNH 5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermai…
• CVE-2026-41150TRUNG BÌNH 5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, there i…
• CVE-2025-54880TRUNG BÌNH 6.1Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify…
• CVE-2022-31108TRUNG BÌNH 6.1Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify…
• CVE-2021-35513TRUNG BÌNH 6.1Mermaid before 8.11.0 allows XSS when the antiscript feature is used.