CVE-2026-102356

Vendor

Yuzutech

Product

kroki

CVSS v3.1

5.0 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness

CWE-918

Exposure class

Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 34
   CVE NVD 4h ago

   Kroki creates diagrams from textual descriptions.

   Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request…

   CVSS 5.0 Fix available CVE-2026-102356 Yuzutech