Starstruk Logo MarkStarstruk

v10.9.4

mermaid-js/mermaidv10.9.4Aug 20, 2025by aloisklink

AI Summary

Backports a security fix from v11.10.0 to prevent XSS attacks in sequence diagram labels.

Key Highlights

  • Security fix for XSS in sequence diagrams
  • Backported from v11.10.0

New Features

  • Security enhancement preventing XSS attacks in sequence diagram labels

Full Release Notes

This release backports the fix for GHSA-7rqq-prvp-x9jh from [v11.10.0](https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.10.0), preventing a potential XSS attack in labels in sequence diagrams.

See: https://github.com/mermaid-js/mermaid/commit/9d685178d215f76be4d5e8fe47c64dd915274738 (on `main` branch)
See: https://github.com/mermaid-js/mermaid/commit/7509b066f164353c26028d5dd366736bed52d0c7 (backported commit)

**Full Changelog**: https://github.com/mermaid-js/mermaid/compare/v10.9.3...v10.9.4