Skip to content
OpenAdvisories

Vendor

lukilabs

1 known vulnerabilities.

Products

beautiful-mermaid 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-26226

    beautiful-mermaid < 0.1.3 SVG Attribute Injection

    beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controlled Mermaid diagrams. User-controlled values from Mermaid style and classDef directives are interpola…

    lukilabs beautiful-mermaid beautiful-mermaid npm