A vulnerability classified as problematic was found in mermaid up to 11.9.0. This vulnerability affects unknown code. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-54881. The attack can be launched remotely. No exploit exists.

A patch should be applied to remediate this issue.