CVE-2021-35513

Mermaid before 8.11.0 allows XSS when the antiscript feature is used...

@balena/jellyfish-chat-widget (>=0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, <=2.0.0-rendition-notifications-1f10048b0b56657415485386d8bdc09fa8b8ffb0), @balena/jellyfish-ui-components (>=0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, <=2.0.25-add-react-virtualised-to-infinite-list-4e291b52a55f3950254be3ce329926ed26ecc421) +17 more potentially affected by CVE-2021-35513 via mermaid (>=8.4.0, <=8.10.1)

mermaid NPM version =8.4.0, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =0.0.3, =0.0.2, =0.0.5, =0.0.5, =0.8.0, =0.8.0, =6.7.0-use-source-sans-pro-6543bbfbb6b2c9ae92a4909d99bb182d9406ef01, =0.0.9,...

@balena/jellyfish-chat-widget (>=0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, <=2.0.0-rendition-notifications-1f10048b0b56657415485386d8bdc09fa8b8ffb0), @balena/jellyfish-ui-components (>=0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, <=2.0.25-add-react-virtualised-to-infinite-list-4e291b52a55f3950254be3ce329926ed26ecc421) +17 more potentially affected by CVE-2021-35513 via mermaid (>=8.4.0, <=8.10.1)

mermaid NPM version =8.4.0, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =0.0.3, =0.0.2, =0.0.5, =0.0.5, =0.8.0, =0.8.0, =6.7.0-use-source-sans-pro-6543bbfbb6b2c9ae92a4909d99bb182d9406ef01, =0.0.9,...

CVE-2021-35513

creationtimestamp| type| source ---|---|--- 2021-06-27 16:21:34+00:00| seen| https://t.me/cibsecurity/25727...

DEBIAN-CVE-2021-35513

Mermaid before 8.11.0 allows XSS when the antiscript feature is used...

CVE-2021-35513

Mermaid before 8.11.0 allows XSS when the antiscript feature is used...

CVE-2021-35513

Mermaid.js prior to version 8.11.0 is affected by a cross‑site scripting (XSS) vulnerability when the antiscript feature is used. The issue stems from Mermaid before 8.11.0 and can be triggered through the antiscript functionality. Evidence in public references indicates mitigation by upgrading t...

@balena/jellyfish-chat-widget (>=0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, <=2.0.0-rendition-notifications-1f10048b0b56657415485386d8bdc09fa8b8ffb0), @balena/jellyfish-ui-components (>=0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, <=2.0.25-add-react-virtualised-to-infinite-list-4e291b52a55f3950254be3ce329926ed26ecc421) +105 more potentially affected by CVE-2021-35513 via mermaid (>=0.2.16, <=8.10.1)

mermaid NPM version =0.2.16, =0.0.2-copy-over-code-9b23b805d2204b212fedd0047ac9423f93c83390, =0.0.2-bring-over-code-43d64c4e7cf302de59073ef35bacdf69932ccba4, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0-alpha.11, =0.1.8, =0.0.3, =0.0.2, =0.0.1, =0.0.10 and more Source cves: CVE-2021-35513 Source...