beautiful-mermaid vulnerabilities

CVEs whose affected-version data names the beautiful-mermaid package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-26226Medium· 5.3PoC

7mo ago

beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controlled Mermaid diagrams

beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controlled Mermaid diagrams. User-controlled values from Mermaid style and classDef di…

▾ Twilightlukilabs · beautiful-mermaidEPSS 0.69%via NVD