Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/08/06 7:55 p.m.18 views

Mermaid allows CSS injection applying to sibling elements of the diagram

Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with mermaid-X, sibling and + combinators can still escape the Mermaid container and inject styles to DOM elements adjacent to the diagram . Most users of mermaid would not be affected by this...

5.3CVSS5.6AI score0.00569EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder