Mermaid_project Mermaid
6 CVEs affecting Mermaid_project Mermaid. Latest disclosed: 2026-05-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43861 | High | 7.2 | 2021-12-30 | Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams… |
CVE-2025-54880 | Medium | 6.1 | 2025-08-19 | Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams… |
CVE-2021-35513 | Medium | 6.1 | 2021-06-27 | Mermaid before 8.11.0 allows XSS when the antiscript feature is used. |
CVE-2026-41159 | Medium | 5.3 | 2026-05-29 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermaid's default configu… |
CVE-2026-41150 | Medium | 5.3 | 2026-05-29 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, there is a denial-of-servi… |
CVE-2022-31108 | Medium | 4.1 | 2022-06-28 | Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams… |