Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection
Moderate severity
GitHub Reviewed
Published
May 11, 2026
in
mermaid-js/mermaid
•
Updated Jun 8, 2026
Give feedback on Dependabot alerts