1 matches found
Mermaid allows CSS injection applying to sibling elements of the diagram
Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with mermaid-X, sibling and + combinators can still escape the Mermaid container and inject styles to DOM elements adjacent to the diagram . Most users of mermaid would not be affected by this...
5.3CVSS5.6AI score0.00569EPSS
SaveExploits0References7Affected Software1
20