3d-emoji (>=2.1.0 <=2.3.0), 6thbridge-hexa-docs (=0.0.1) +3204 more potentially affected by CVE-2021-43861 via mermaid (>=0.2.16 <=8.13.4)

mermaid NPM version =0.2.16, =2.1.0, =0.1.0, =1.4.8, =0.1.0, =0.0.1, =0.18.0-beta.0, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =1.0.3, =2.13.43, =2.13.43, =2.13.94 and more Source cves: CVE-2021-43861 Source advisory: OSV:GHSA-P3RP-VMJ9-GV6V...

CVE-2021-43861

Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers' machines. Users should upgrade to version 8.13.8 t...

CVE-2021-43861

CVE-2021-43861 affects Mermaid (JavaScript diagramming tool). The vulnerability occurs in versions prior to 8.13.8 where crafted diagrams can execute JavaScript on readers’ machines. The advisory/records in connected documents confirm the issue, its impact, and the remediation: upgrade Mermaid to...