CVE-2026-26226
1 advisory.
npm/beautiful-mermaid CVE-2026-26226: medium, EPSS 0.75%
beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS)
Action: Upgrade beautiful-mermaid to 0.1.3 or later.
npm i beautiful-mermaid@0.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.3 | - |
Fixed versions
| 0.1.3 |
Sources
- osv: GHSA-cgmm-x5ww-q5cr
- https://nvd.nist.gov/vuln/detail/CVE-2026-26226
- https://github.com/lukilabs/beautiful-mermaid/pull/8
- https://github.com/lukilabs/beautiful-mermaid/commit/68f3ab8c9658e7f4a3b749e06a6b96e4c3f55db1
- https://github.com/lukilabs/beautiful-mermaid
- https://github.com/lukilabs/beautiful-mermaid/releases/tag/v0.1.3
- https://neo.projectdiscovery.io/share/cec71dc7-a8eb-417e-b8b4-666644796c1e
- https://www.vulncheck.com/advisories/beautiful-mermaid-svg-attribute-injection
CVE-2026-26226 · published · modified · JSON