966 matches found
CLEANSTART-2026-JN88111 Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
Security vulnerability affects the langfuse-worker package. Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts...
CLEANSTART-2026-BR47308 Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
Security vulnerability affects the langfuse-worker package. Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts...
CLEANSTART-2026-IJ85672 Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
Security vulnerability affects the langfuse-worker package. Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts...
CLEANSTART-2026-RY14465 Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
Security vulnerability affects the langfuse-worker package. Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts...
CLEANSTART-2026-VM01016 Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
Security vulnerability affects the langfuse-worker package. Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts...
CVE-2026-96384
Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...
CVE-2026-96384
The Drupal Mermaid Diagram Field module (versions 1.0.4 through 1.0.9 ) is vulnerable to an Incorrect Authorization issue that allows Forceful Browsing . The root cause is that the module does not properly limit access to modal content and fails to sufficiently respect default revision behavior. ...
EUVD-2026-107821
Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...
CVE-2026-96384 Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180
Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...
CVE-2026-96384 Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180
Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...
CVE-2026-96384 Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180
Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...
Drupal Mermaid Diagram Field authorization issue vulnerability
Drupal Mermaid Diagram Field versions 1.0.4 through 1.0.9 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks and may lead to forced browsing...
lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
SummaryThe LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown isconfigured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizerrehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derivedfrom user-ingested documents...
CVE-2026-103493
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
EUVD-2026-90584
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
CVE-2026-103493
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
CVE-2026-103493
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
CVE-2026-103493
JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a stored Cross-Site Scripting (XSS) flaw. The root cause involves the handling of Mermaid and LaTeX content , which allows an attacker to execute malicious scripts in the context of other users' sessions. This vulnerability has a...
CVE-2026-103493: Improper Neutralization of Input During Web Page Generation
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...
