Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/08/06 7:55 p.m.•35 views

Mermaid allows CSS injection applying to sibling elements of the diagram

Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with mermaid-X, sibling and + combinators can still escape the Mermaid container and inject styles to DOM elements adjacent to the diagram . Most users of mermaid would not be affected by this...

5.3CVSS5.9AI score0.00603EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder