org.webjars.npm:mermaid@11.6.0 vulnerabilities
latest version
11.6.0
latest non vulnerable version
first published
9 years ago
latest version published
3 months ago
licenses detected
- [6.0.0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.npm:mermaid package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.webjars.npm:mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the node labels which were introduced in 734bde3. An attacker can execute arbitrary JavaScript in the context of the application by injecting malicious HTML content into the How to fix Cross-site Scripting (XSS)? A fix was pushed into the | [11.1.0,) |
org.webjars.npm:mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the How to fix Cross-site Scripting (XSS)? A fix was pushed into the | [10.9.0,) |