Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2 days ago10 views

Mermaid allows CSS injection applying to sibling elements of the diagram

Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with mermaid-X, sibling and + combinators can still escape the Mermaid container and inject styles to DOM elements adjacent to the diagram . Most users of mermaid would not be affected by this...

5.3CVSS5.6AI score0.00569EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder