Skip to content
OpenAdvisories

Package · Debian

node-mermaid

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2021-43861

    Incorrect sanitisation function leads to `XSS`

    Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers' machines. Us…

    mermaid-js mermaid node-mermaid mermaid Debian Ubuntu npm