CVE-2026-26226 | lukilabs beautiful-mermaid up to 0.1.2 SVG Attribute cross site scripting

A vulnerability was found in lukilabs beautiful-mermaid up to 0.1.2. It has been declared as problematic. Affected by this issue is some unknown functionality of the component SVG Attribute Handler. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-26226. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.