org.webjars.npm:mermaid

Licenses: MIT

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:mermaid package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Arbitrary Code Injection

[,10.9.8)[11.0.0-alpha.1,11.16.1)
  • M
Use of Blocking Code in Single-threaded, Non-blocking Context

[11.6.0,11.16.1)
  • L
Prototype Pollution

[,10.9.8)[11.0.0-alpha.1,11.16.1)
  • M
Improperly Controlled Sequential Memory Allocation

[10.6.0,10.9.8)[11.0.0-alpha.1,11.16.1)
  • M
Prototype Pollution

[11.5.0,11.16.1)
  • M
Arbitrary Code Injection

[,11.15.0)
  • M
Arbitrary Code Injection

[,11.15.0)
  • M
Arbitrary Code Injection

[,11.15.0)
  • M
Infinite loop

[,11.15.0)
  • M
Cross-site Scripting (XSS)

[,11.12.3)
  • M
Cross-site Scripting (XSS)

[,11.12.3)
  • M
Information Exposure

[,9.4.0)
  • H
Cross-site Scripting (XSS)

[,8.13.8)
  • M
Cross-site Scripting (XSS)

[,8.11.0)
  • M
Cross-site Scripting (XSS)

[,8.2.3)

Package versions

33 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
11.16.113 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
11.15.019 May, 2026
  • 0
    C
  • 0
    H
  • 4
    M
  • 1
    L
11.14.03 Apr, 2026
  • 0
    C
  • 0
    H
  • 8
    M
  • 1
    L
11.12.321 Feb, 2026
  • 0
    C
  • 0
    H
  • 8
    M
  • 1
    L
11.6.024 May, 2025
  • 0
    C
  • 0
    H
  • 10
    M
  • 1
    L
11.2.11 Oct, 2024
  • 0
    C
  • 0
    H
  • 8
    M
  • 1
    L
11.1.05 Sep, 2024
  • 0
    C
  • 0
    H
  • 8
    M
  • 1
    L
10.9.015 Mar, 2024
  • 0
    C
  • 0
    H
  • 8
    M
  • 1
    L
10.6.119 Nov, 2023
  • 0
    C
  • 0
    H
  • 8
    M
  • 1
    L
10.4.029 Sep, 2023
  • 0
    C
  • 0
    H
  • 7
    M
  • 1
    L