← Back

Mdx Mermaid Project

mdx-mermaid_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Mdx Mermaid
mdx-mermaid
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36036
1Mdx Mermaid Project
1Mdx Mermaid
Nov 21, 2024
Aug 29, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it...Show more
mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when the component is loaded by MDXjs. This vulnerability was patched in version(s) 1.3.0 and 2.0.0-rc2. There are currently no known workarounds.Show less