Lucene search
+L

737 matches found

NVD
NVD
added 2026/08/27 1:18 p.m.6 views

CVE-2026-81753

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

5.1CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 12:06 p.m.13 views

CVE-2026-81753

Flowintel versions >= 3.3.0 are affected by a stored XSS vulnerability in case notes that contain Mermaid diagram blocks . Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note can store a crafted Mermaid payload that...

5.1CVSS5.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 12:06 p.m.6 views

EUVD-2026-67009

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

5.1CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/27 12:06 p.m.25 views

CVE-2026-81753 Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

5.1CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/17 8:16 p.m.6 views

CVE-2026-74234

Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...

7.7CVSS0.0028EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/17 7:38 p.m.6 views

CVE-2026-74234

...

5.1AI score0.0028EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/17 7:38 p.m.9 views

EUVD-2026-60437

Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...

7.7CVSS5.7AI score0.0028EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/17 7:38 p.m.14 views

CVE-2026-74234

Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...

7.7CVSS5.7AI score0.0028EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/17 7:38 p.m.48 views

CVE-2026-74234

...

0.0028EPSS
SaveExploits0
CVE
CVE
added 2026/08/17 7:38 p.m.25 views

CVE-2026-74234

Legora before 2026-08-14 renders Mermaid diagrams by running a gray-matter front-matter parser that calls eval() before SVG sanitization, letting attackers inject arbitrary JavaScript via crafted diagram content. Impact is elevated on Word and Outlook add-in surfaces where bearer session tokens a...

7.7CVSS5.7AI score0.0028EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.10 views

PT-2026-76764

Name of the Vulnerable Software and Affected Versions Legora versions prior to 2026-08-14 Description A cross-site scripting issue exists where attackers can execute arbitrary JavaScript in a victim's browser. This occurs when a Mermaid block is prefixed with a gray-matter JavaScript front-matter...

7.7CVSS5.3AI score0.0028EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/10 10:06 a.m.8 views

CVE-2026-71439

A flaw was found in Mermaid. Mermaid Radar Diagrams are susceptible to a denial of service vulnerability. A remote attacker could exploit this by providing excessively large values for the 'ticks' parameter. This can lead to high CPU usage, causing the rendering webpage or JavaScript process to...

6.5CVSS5.3AI score0.0043EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/08/10 10:06 a.m.7 views

CVE-2026-50159

A flaw was found in Mermaid, a JavaScript tool for creating diagrams and charts. An attacker who can provide diagram text can inject arbitrary CSS Cascading Style Sheets into the rendered web page. This is possible due to a vulnerability in how sibling combinator selectors are generated from...

5.3CVSS5.5AI score0.00609EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/08/09 7:25 a.m.19 views

CVE-2026-71438

A flaw was found in Mermaid, a JavaScript tool for creating diagrams. The tool's configuration application programming interfaces APIs, specifically mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig, are vulnerable to prototype pollution. This occurs because these APIs...

4CVSS6.1AI score0.002EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/08/09 7:20 a.m.13 views

CVE-2026-71437

A flaw was found in Mermaid, a JavaScript tool for creating diagrams. This vulnerability, known as prototype pollution, occurs when a specially crafted diagram defines a group with a specific identifier. An attacker who can provide malicious diagram text can exploit this by manipulating core...

6.5CVSS5.6AI score0.00363EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/09 7:17 a.m.8 views

CVE-2026-19338

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

5.3CVSS0.00138EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 6:15 a.m.42 views

CVE-2026-19338 automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

5.3CVSS0.00138EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/09 6:15 a.m.11 views

EUVD-2026-54907

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

5.3CVSS5.4AI score0.00138EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 6:15 a.m.59 views

CVE-2026-19338

CVE-2026-19338 affects automateyournetwork MCPyATS up to 0.1.4, specifically the function processGenerateRequest in mcp_servers/mermaid/index.ts of the generate_mermaid_markdown component. The vulnerability stems from path traversal caused by manipulating the folder/name argument, with the attack...

5.3CVSS5.4AI score0.00138EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/08/07 5:03 p.m.9 views

SUSE CVE-2026-50159

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text c...

5.3CVSS5.5AI score0.00609EPSS
SaveExploits0References3
Rows per page
Query Builder