Mermaid CVE-2025-54881: Critical XSS via Sequence Diagram Labels
Security Advisory
CVE-2025-54881
Critical
mermaid-js
Affected:
- mermaid >= 11.0.0-alpha.1, < 11.10.0
- mermaid >= 10.9.0-rc.1, < 10.9.4
Fixed in:
- 11.10.0
- 10.9.4
Referenced CVEs:
CVE-2025-54881
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.