Vulnerabilities - Markdown Preview Mermaid Support@0.0.4 - Visual Studio Code

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/03/16

All detected vulnerabilities are fixable

Run the update/upgrade command in your package manager to resolve the detected vulnerabilities

CVSS Score

CVE

Summary

Tags

critical

9.8

CVE-2021-44906

Minimist is vulnerable to Prototype Pollution via the setKey function.

Exploits Exist

Fix Available

critical

9.1

CVE-2019-10744

Lodash is vulnerable to Prototype Pollution via the defaultsDeep function.

Exploits Exist

Fix Available

high

7.5

CVE-2017-18214

Moment is prone to a regular expression denial of service via a crafted date string.

Exploits Exist

Fix Available

high

7.5

CVE-2022-24785

Moment.js is vulnerable to a path traversal vulnerability when a user-provided locale string is directly used to switch moment locale.

Exploited by Malware

Exploits Exist

Fix Available

high

7.5

CVE-2022-25883

Semver is vulnerable to Regular Expression Denial of Service (ReDoS) via the new Range function.

Exploits Exist

Fix Available

high

7.5

CVE-2022-31129

Moment is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient parsing algorithm in string-to-date parsing, specifically rfc2822 parsing.

Exploits Exist

Fix Available

high

7.4

CVE-2020-8203

Lodash is vulnerable to Prototype Pollution when using _.zipObjectDeep, allowing a malicious user to modify the Object prototype.

Exploits Exist

Fix Available

high

7.2

CVE-2021-23337

Lodash is vulnerable to Command Injection via the template function.

Exploits Exist

Fix Available

medium

6.9

CVE-2025-13465

Lodash is vulnerable to prototype pollution in the _.unset and _.omit functions.

Fix Available

medium

6.5

CVE-2018-3721

Lodash is vulnerable to Modification of Assumed-Immutable Data via defaultsDeep, merge, and mergeWith functions.

Exploits Exist

Fix Available

Markdown Preview Mermaid Support

SAFE Assessment

Compliance

Security

Threats

Did you know...