Known vulnerabilities in mermaid-js mermaid
10.9.6
10.9.5
11.15.0
11.14.0
11.13.0
11.12.3
11.12.2
11.12.1
11.0.0
10.9.4
10.9.3
10.9.2
10.9.1
10.9.0
10.8.0
10.7.0
10.6.1
10.6.0
10.5.1
10.5.0
10.4.0
10.3.1
10.3.0
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.0
10.0.2
10.0.1
10.0.0
9.4.3
9.4.2
9.4.0
9.3.0
9.2.2
9.2.1
9.2.0
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
9.1.0
9.0.1
9.0.0
8.14.0
8.13.11
8.13.10
8.13.9
8.13.8
8.13.7
8.13.6
8.13.5
8.13.4
8.13.3
8.13.2
8.13.1
8.13.0
8.12.1
8.12.0
8.11.5
8.11.4
8.11.3
8.11.2
8.11.1
8.11.0
8.10.1
8.9.3
8.9.2
8.9.1
8.9.0
8.8.4
8.8.3
8.8.2
8.8.1
8.8.0
8.7.0
8.6.4
8.6.3
8.6.2
8.6.0
8.5.2
8.5.1
8.4.8
8.4.6
8.4.4
8.4.3
8.4.2
8.4.1
8.4.0
8.3.0
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.0
7.0.5
7.0.3
7.0.2
7.0.0
6.0.0
0.5.8
0.5.7
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.0
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.2.16
0.2.15
0.2.14
0.2.13
0.2.10
0.2.9
0.2.8
0.2.7
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.1
0.1.0
11.12.0
11.11.0
11.10.1
11.10.0
11.9.0
11.8.1
11.8.0
11.7.0
11.6.0
11.5.0
11.4.1
11.4.0
11.3.0
11.2.1
11.2.0
11.1.1
11.1.0
11.0.2
11.0.1
Security bulletins (5)
| Secuity bulletin | Severity | Status | Published |
|---|---|---|---|
| SB2026051244: Multiple vulnerabilities in mermaid | Medium | 12.05.2026 | |
| SB2025092311: Two XSS vulnerabilities in mermaid-js mermaid | Low | 23.09.2025 | |
| SB20241022403: Mermaid update for DOMPurify | Medium | 22.10.2024 | |
| SB2022062843: Cross-site scripting in mermaid | Medium | 28.06.2022 | |
| SB2021122919: Cross-site scripting in mermaid | Medium | 29.12.2021 |