CVE-2026-81753: Flowintel Markdownit Fence Mermaid Xss

Overriding markdown-it fence rendering with incomplete Mermaid diagram detection and unescaped token content may allow Cross-Site Scripting (XSS).

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0Generic
greprules fetch cve-2026-81753-flowintel-markdownit-fence-mermaid-xss --engine opengrep

Description

Overriding markdown-it fence rendering with incomplete Mermaid diagram detection and unescaped token content may allow Cross-Site Scripting (XSS).