CVE-2021-43861
1 advisory.
npm/mermaid CVE-2021-43861: high 7.2, EPSS 0.94%
Incorrect sanitisation function leads to `XSS` in mermaid
Action: Upgrade mermaid to 8.13.8 or later.
npm i mermaid@8.13.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.13.8 | - |
Fixed versions
| 8.13.8 |
Sources
- osv: GHSA-p3rp-vmj9-gv6v
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-p3rp-vmj9-gv6v
- https://nvd.nist.gov/vuln/detail/CVE-2021-43861
- https://github.com/mermaid-js/mermaid/commit/066b7a0d0bda274d94a2f2d21e4323dab5776d83
- https://github.com/mermaid-js/mermaid
- https://github.com/mermaid-js/mermaid/releases/tag/8.13.8
CVE-2021-43861 · published · modified · JSON