Skip to main content

Mermaid Project

4 CVEs vendor

Monthly

CVE-2025-54880 Aug 19, 17:15 npm MEDIUM POC PATCH This Month

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Suse Mermaid Mermaid Project
NVD GitHub
CVSS 4.0
5.1
EPSS
0.0%
CVE-2022-31108 Jun 28, 19:15 npm MEDIUM POC PATCH This Month

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Mermaid Mermaid Project
NVD GitHub
CVSS 3.1
6.1
EPSS
0.8%
CVE-2021-43861 Dec 30, 14:15 npm MEDIUM PATCH This Month

Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Mermaid Mermaid Project
NVD GitHub
CVSS 3.1
5.4
EPSS
0.9%
CVE-2021-35513 Jun 27, 12:15 npm MEDIUM PATCH This Month

Mermaid before 8.11.0 allows XSS when the antiscript feature is used. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Mermaid Mermaid Project
NVD GitHub
CVSS 3.1
6.1
EPSS
1.0%
EPSS 0% CVSS 5.1
MEDIUM POC PATCH This Month

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Suse Mermaid +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Mermaid Mermaid Project
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Mermaid Mermaid Project
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Mermaid before 8.11.0 allows XSS when the antiscript feature is used. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Mermaid Mermaid Project
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy