Security: mermaid-js/mermaid
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Improper sanitization of sequence diagram labels leads to XSSGHSA-7rqq-prvp-x9jh published
Aug 19, 2025 by sidharthv96Critical -
Prototype pollution in bundled version of DOMPurifyGHSA-m4gq-x24j-jpmf published
Oct 22, 2024 by aloisklinkHigh -
Possible inject arbitrary `CSS` into the generated graph affecting the container HTMLGHSA-x3vm-38hw-55wf published
Jun 28, 2022 by knsvModerate -
Incorrect sanitisation function leads to `XSS`GHSA-p3rp-vmj9-gv6v published
Dec 29, 2021 by knsvHigh