Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-9hch-63av-c3e2
Summary
Cross-Site Scripting in mermaid
Versions of `mermaid` prior to 8.2.3 are vulnerable to Cross-Site Scripting. If malicious input  such as `A["<img src=invalid onerror=alert('XSS')></img>"] ` is provided to the application, it will execute the code instead of rendering it as text due to improper output encoding.


## Recommendation

Upgrade to version 8.2.3 or later
Aliases
0
alias GHSA-w32g-5hqp-gg6q
1
alias GMS-2020-747
Fixed_packages
0
url pkg:npm/mermaid@8.2.3
purl pkg:npm/mermaid@8.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6qac-5y2d-akdd
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.2.3
Affected_packages
0
url pkg:npm/mermaid@0.2.11
purl pkg:npm/mermaid@0.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.2.11
1
url pkg:npm/mermaid@0.2.12
purl pkg:npm/mermaid@0.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.2.12
2
url pkg:npm/mermaid@0.2.13
purl pkg:npm/mermaid@0.2.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.2.13
3
url pkg:npm/mermaid@0.2.14
purl pkg:npm/mermaid@0.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.2.14
4
url pkg:npm/mermaid@0.2.15
purl pkg:npm/mermaid@0.2.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.2.15
5
url pkg:npm/mermaid@0.2.16
purl pkg:npm/mermaid@0.2.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.2.16
6
url pkg:npm/mermaid@0.3.0
purl pkg:npm/mermaid@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.3.0
7
url pkg:npm/mermaid@0.3.2
purl pkg:npm/mermaid@0.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.3.2
8
url pkg:npm/mermaid@0.3.3
purl pkg:npm/mermaid@0.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.3.3
9
url pkg:npm/mermaid@0.3.4
purl pkg:npm/mermaid@0.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.3.4
10
url pkg:npm/mermaid@0.3.5
purl pkg:npm/mermaid@0.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.3.5
11
url pkg:npm/mermaid@0.4.0
purl pkg:npm/mermaid@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.4.0
12
url pkg:npm/mermaid@0.5.0
purl pkg:npm/mermaid@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.0
13
url pkg:npm/mermaid@0.5.1
purl pkg:npm/mermaid@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.1
14
url pkg:npm/mermaid@0.5.2
purl pkg:npm/mermaid@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.2
15
url pkg:npm/mermaid@0.5.3
purl pkg:npm/mermaid@0.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.3
16
url pkg:npm/mermaid@0.5.4
purl pkg:npm/mermaid@0.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.4
17
url pkg:npm/mermaid@0.5.5
purl pkg:npm/mermaid@0.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.5
18
url pkg:npm/mermaid@0.5.6
purl pkg:npm/mermaid@0.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.6
19
url pkg:npm/mermaid@0.5.7
purl pkg:npm/mermaid@0.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.7
20
url pkg:npm/mermaid@0.5.8
purl pkg:npm/mermaid@0.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@0.5.8
21
url pkg:npm/mermaid@6.0.0
purl pkg:npm/mermaid@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@6.0.0
22
url pkg:npm/mermaid@7.0.0
purl pkg:npm/mermaid@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.0
23
url pkg:npm/mermaid@7.0.1
purl pkg:npm/mermaid@7.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.1
24
url pkg:npm/mermaid@7.0.2
purl pkg:npm/mermaid@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.2
25
url pkg:npm/mermaid@7.0.3
purl pkg:npm/mermaid@7.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.3
26
url pkg:npm/mermaid@7.0.4
purl pkg:npm/mermaid@7.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.4
27
url pkg:npm/mermaid@7.0.5
purl pkg:npm/mermaid@7.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.5
28
url pkg:npm/mermaid@7.0.6
purl pkg:npm/mermaid@7.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.6
29
url pkg:npm/mermaid@7.0.7
purl pkg:npm/mermaid@7.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.7
30
url pkg:npm/mermaid@7.0.8
purl pkg:npm/mermaid@7.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.8
31
url pkg:npm/mermaid@7.0.9
purl pkg:npm/mermaid@7.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.9
32
url pkg:npm/mermaid@7.0.10
purl pkg:npm/mermaid@7.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.10
33
url pkg:npm/mermaid@7.0.11
purl pkg:npm/mermaid@7.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.11
34
url pkg:npm/mermaid@7.0.12
purl pkg:npm/mermaid@7.0.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.12
35
url pkg:npm/mermaid@7.0.13
purl pkg:npm/mermaid@7.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.13
36
url pkg:npm/mermaid@7.0.14
purl pkg:npm/mermaid@7.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.14
37
url pkg:npm/mermaid@7.0.15
purl pkg:npm/mermaid@7.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.15
38
url pkg:npm/mermaid@7.0.16
purl pkg:npm/mermaid@7.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.16
39
url pkg:npm/mermaid@7.0.17
purl pkg:npm/mermaid@7.0.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.17
40
url pkg:npm/mermaid@7.0.18
purl pkg:npm/mermaid@7.0.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.0.18
41
url pkg:npm/mermaid@7.1.0
purl pkg:npm/mermaid@7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.1.0
42
url pkg:npm/mermaid@7.1.1
purl pkg:npm/mermaid@7.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.1.1
43
url pkg:npm/mermaid@7.1.2
purl pkg:npm/mermaid@7.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@7.1.2
44
url pkg:npm/mermaid@8.0.0-alpha.1
purl pkg:npm/mermaid@8.0.0-alpha.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.1
45
url pkg:npm/mermaid@8.0.0-alpha.2
purl pkg:npm/mermaid@8.0.0-alpha.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.2
46
url pkg:npm/mermaid@8.0.0-alpha.3
purl pkg:npm/mermaid@8.0.0-alpha.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.3
47
url pkg:npm/mermaid@8.0.0-alpha.4
purl pkg:npm/mermaid@8.0.0-alpha.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.4
48
url pkg:npm/mermaid@8.0.0-alpha.5
purl pkg:npm/mermaid@8.0.0-alpha.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.5
49
url pkg:npm/mermaid@8.0.0-alpha.6
purl pkg:npm/mermaid@8.0.0-alpha.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.6
50
url pkg:npm/mermaid@8.0.0-alpha.8
purl pkg:npm/mermaid@8.0.0-alpha.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.8
51
url pkg:npm/mermaid@8.0.0-alpha.9
purl pkg:npm/mermaid@8.0.0-alpha.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-alpha.9
52
url pkg:npm/mermaid@8.0.0-beta.1
purl pkg:npm/mermaid@8.0.0-beta.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.1
53
url pkg:npm/mermaid@8.0.0-beta.2
purl pkg:npm/mermaid@8.0.0-beta.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.2
54
url pkg:npm/mermaid@8.0.0-beta.3
purl pkg:npm/mermaid@8.0.0-beta.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.3
55
url pkg:npm/mermaid@8.0.0-beta.4
purl pkg:npm/mermaid@8.0.0-beta.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.4
56
url pkg:npm/mermaid@8.0.0-beta.5
purl pkg:npm/mermaid@8.0.0-beta.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.5
57
url pkg:npm/mermaid@8.0.0-beta.6
purl pkg:npm/mermaid@8.0.0-beta.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.6
58
url pkg:npm/mermaid@8.0.0-beta.7
purl pkg:npm/mermaid@8.0.0-beta.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.7
59
url pkg:npm/mermaid@8.0.0-beta.8
purl pkg:npm/mermaid@8.0.0-beta.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.8
60
url pkg:npm/mermaid@8.0.0-beta.9
purl pkg:npm/mermaid@8.0.0-beta.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-beta.9
61
url pkg:npm/mermaid@8.0.0-rc.1
purl pkg:npm/mermaid@8.0.0-rc.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.1
62
url pkg:npm/mermaid@8.0.0-rc.2
purl pkg:npm/mermaid@8.0.0-rc.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.2
63
url pkg:npm/mermaid@8.0.0-rc.3
purl pkg:npm/mermaid@8.0.0-rc.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.3
64
url pkg:npm/mermaid@8.0.0-rc.4
purl pkg:npm/mermaid@8.0.0-rc.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.4
65
url pkg:npm/mermaid@8.0.0-rc.5
purl pkg:npm/mermaid@8.0.0-rc.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.5
66
url pkg:npm/mermaid@8.0.0-rc.6
purl pkg:npm/mermaid@8.0.0-rc.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.6
67
url pkg:npm/mermaid@8.0.0-rc.7
purl pkg:npm/mermaid@8.0.0-rc.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.7
68
url pkg:npm/mermaid@8.0.0-rc.8
purl pkg:npm/mermaid@8.0.0-rc.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9hch-63av-c3e2
1
vulnerability VCID-fgz4-kbun-23bn
2
vulnerability VCID-fwuk-z3uk-1ygf
3
vulnerability VCID-hbtz-4sw3-63dt
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0-rc.8
69
url pkg:npm/mermaid@8.0.0
purl pkg:npm/mermaid@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6qac-5y2d-akdd
1
vulnerability VCID-9hch-63av-c3e2
2
vulnerability VCID-fgz4-kbun-23bn
3
vulnerability VCID-fwuk-z3uk-1ygf
4
vulnerability VCID-hbtz-4sw3-63dt
5
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.0.0
70
url pkg:npm/mermaid@8.1.0
purl pkg:npm/mermaid@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6qac-5y2d-akdd
1
vulnerability VCID-9hch-63av-c3e2
2
vulnerability VCID-fgz4-kbun-23bn
3
vulnerability VCID-fwuk-z3uk-1ygf
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.1.0
71
url pkg:npm/mermaid@8.2.1
purl pkg:npm/mermaid@8.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6qac-5y2d-akdd
1
vulnerability VCID-9hch-63av-c3e2
2
vulnerability VCID-fgz4-kbun-23bn
3
vulnerability VCID-fwuk-z3uk-1ygf
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.2.1
72
url pkg:npm/mermaid@8.2.2
purl pkg:npm/mermaid@8.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6qac-5y2d-akdd
1
vulnerability VCID-9hch-63av-c3e2
2
vulnerability VCID-fgz4-kbun-23bn
3
vulnerability VCID-fwuk-z3uk-1ygf
4
vulnerability VCID-x94b-cysu-4fbe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/mermaid@8.2.2
References
0
reference_url https://github.com/knsv/mermaid
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/knsv/mermaid
1
reference_url https://github.com/knsv/mermaid/issues/847
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/knsv/mermaid/issues/847
2
reference_url https://www.npmjs.com/advisories/751
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/advisories/751
3
reference_url https://github.com/advisories/GHSA-w32g-5hqp-gg6q
reference_id GHSA-w32g-5hqp-gg6q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w32g-5hqp-gg6q
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 707
name Improper Neutralization
description The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-9hch-63av-c3e2