mermaid-js Mermaid Vulnerabilities

Mermaid-js Mermaid vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

22 May 2026

HTML Injection Vulnerability in Mermaid JavaScript Diagram Tool
CVE-2026-41149
Mermaid-jsMermaid5.3MEDIUM
CSS Injection Vulnerability in Mermaid Diagramming Tool by Mermaid
CVE-2026-41148
Mermaid-jsMermaid5.3MEDIUM

19 August 2025

Cross-Site Scripting Vulnerability in Mermaid Diagramming Tool by Mermaid
CVE-2025-54881
Mermaid-jsMermaid5.3MEDIUM
Cross-Site Scripting Vulnerability in Mermaid Diagramming Tool by Mermaid
CVE-2025-54880
Mermaid-jsMermaid5.1MEDIUM

28 June 2022

Arbitrary `CSS` injection into the generated graph affecting the container HTML in mermaid.js
CVE-2022-31108
Mermaid-jsMermaid4.1MEDIUM

30 December 2021

Incorrect sanitisation function leads to `XSS`
CVE-2021-43861
Mermaid-jsMermaid7.2HIGH