VYPR

Beautiful Mermaid

by Lukilabs

Source repositories

CVEs (1)

  • CVE-2026-26226MedFeb 13, 2026
    risk 0.27cvss epss 0.01

    beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting (XSS) when rendering attacker-controlled Mermaid diagrams. User-controlled values from Mermaid style and classDef directives are interpolated into SVG…