CVE-2025-54880
1 advisory.
npm/mermaid CVE-2025-54880: medium
Mermaid does not properly sanitize architecture diagram iconText leading to XSS
Action: Upgrade mermaid to 11.10.0 or later.
npm i mermaid@11.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.1.0 | 11.10.0 | - |
Fixed versions
| 11.10.0 |
Sources
- osv: GHSA-8gwm-58g9-j8pw
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-8gwm-58g9-j8pw
- https://nvd.nist.gov/vuln/detail/CVE-2025-54880
- https://github.com/mermaid-js/mermaid/commit/2aa83302795183ea5c65caec3da1edd6cb4791fc
- https://github.com/mermaid-js/mermaid/commit/734bde38777c9190a5a72e96421c83424442d4e4
- https://github.com/mermaid-js/mermaid
CVE-2025-54880 · published · modified · JSON