VYPR

Mdx Mermaid

by Mdx Mermaid Project

Source repositories

CVEs (1)

  • CVE-2022-36036LowAug 29, 2022
    risk 0.16cvss 3.6epss 0.00

    mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when the component is loaded by MDXjs. This…