Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-55180
HistoryJun 28, 2021 - 12:00 a.m.

Mermaid Cross-Site Scripting Vulnerability

2021-06-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
16

0.001 Low

EPSS

Percentile

33.5%

Mermaid is a Javascript-based drawing tool that uses a Markdown-like syntax to allow users to easily and quickly create diagrams from code.A cross-site scripting vulnerability exists in versions of Mermaid prior to 8.11.0 when using antiscript features. No details of the vulnerability are currently available.

CPENameOperatorVersion
mermaid mermaidlt8.11.0

0.001 Low

EPSS

Percentile

33.5%