An open index of dependabot pull requests across open source projects.

mermaid

Ecosystem:
npm
Package URL:
pkg:npm/mermaid
Total PRs:
4,709 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
2,537 repositories
Unique Repos (30 days):
70 repositories
Security Advisories
Mermaid XY Charts are vulnerable to an infinite loop DoS
GHSA-2v8p-3f2j-5mp7 CVE-2026-71436 MODERATE published 3 months ago • updated 15 days ago
### Impact Mermaid XY Charts are vulnerable to an infinite loop DoS attack in the `setXAxisRangeData()`, when configuring an X-Axis with invalid p...
Mermaid improperly sanitizes sequence diagram labels leading to XSS
GHSA-7rqq-prvp-x9jh CVE-2025-54881 MODERATE published about 1 year ago • updated about 16 hours ago
### Summary In the default configuration of mermaid 11.9.0, user supplied input for sequence diagram labels is passed to `innerHTML` during calcula...
Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS
GHSA-6m6c-36f7-fhxh CVE-2026-41150 MODERATE published 6 months ago • updated 7 days ago
### Impact Mermaid v11.14.0 and earlier are vulnerable to a denial-of-service attack when rendering gantt charts, if they use the [`excludes` attr...
Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection
GHSA-ghcm-xqfw-q4vr CVE-2026-41149 MODERATE published 6 months ago • updated 4 days ago
### Impact Under the default configuration, Mermaid state diagram's `classDef` allow DOM injection that escapes the SVG, although `<script>` tags ...
Mermaid: Improper sanitization of configuration leads to CSS injection
GHSA-87f9-hvmw-gh4p CVE-2026-41159 MODERATE published 6 months ago • updated 16 days ago
### Impact Mermaid's default configuration allows injecting CSS that applies outside of the Mermaid diagram via the `fontFamily`, `themeCSS`, and ...
Recent PRs
Package Details
Name: mermaid
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/mermaid
JSON API: View JSON
Security Advisories

16

Active advisories
HIGH 3
MODERATE 12
LOW 1
View All npm Advisories
Package Information
Description:

Markdown-ish syntax for generating flowcharts, mindmaps, sequence diagrams, class diagrams, gantt charts, git graphs and more.

Repository: https://github.com/mermaid-js/mermaid
Homepage: https://github.com/mermaid-js/mermaid#readme
Latest Release: 11.5.0
over 1 year ago
Dependent Repos: 13,441
Dependent Packages: 554
Downloads: 4,782,616
Ranking: Top 0.2338% by dependent repos Top 0.1864% by downloads Top 0.1203% by dependent pkgs
PR Status
Open 2,533 (53.8%)
Merged 397 (8.4%)
Closed 1,704 (36.2%)
PR Types
Major 754 (16.0%)
Minor 3,215 (68.3%)
Patch 657 (14.0%)
Removal 4 (0.1%)