Lucene search
+L

1 matches found

OSV
OSV
added 2024/10/22 6:17 p.m.10 views

GHSA-M4GQ-X24J-JPMF Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify

The following bundled files within the Mermaid NPM package contain a bundled version of DOMPurify that is vulnerable to https://github.com/cure53/DOMPurify/security/advisories/GHSA-mmhx-hmjr-r674, potentially resulting in an XSS attack. This affects the built: - dist/mermaid.min.js -...

7CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder