npm/mermaid: high 7

Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify

Action: Upgrade mermaid to 10.9.3 or later.

npm i mermaid@10.9.3

Affected

Fixed versions

Sources

• osv: GHSA-m4gq-x24j-jpmf
• https://github.com/cure53/DOMPurify/security/advisories/GHSA-mmhx-hmjr-r674
• https://github.com/mermaid-js/mermaid/security/advisories/GHSA-m4gq-x24j-jpmf
• https://github.com/mermaid-js/mermaid/commit/6c785c93166c151d27d328ddf68a13d9d65adc00
• https://github.com/mermaid-js/mermaid/commit/92a07ffe40aab2769dd1c3431b4eb5beac282b34
• https://github.com/mermaid-js/mermaid

published 2024-10-22T18:17:02Z · modified 2024-10-23T14:24:24Z · JSON