PT-2024-40360 · Npm +1 · Mermaid +1
Name of the Vulnerable Software and Affected Versions: Mermaid versions prior to the version containing the fix for the DOMPurify vulnerability Description: The Mermaid NPM package contains a vulnerable version of DOMPurify, potentially resulting in an XSS attack. This issue affects users who use...