AIKIDO-2026-10157

TL;DR

Affected versions of this package allow crafted Mermaid diagrams to inject arbitrary SVG attributes and elements because user-controlled values from style and classDef directives are interpolated into SVG attributes without proper escaping, enabling XSS and element injection. An attacker can exploit this by supplying malicious values that prematurely close SVG tags and inject new elements such as <svg onload> to execute JavaScript on render, or <image> tags to load external resources for data exfiltration.