CVE-2026-102356 | Yuzutech Kroki up to 0.31.1 Mermaid Companion mermaid/src/worker.js server-side request forgery

November 6, 2026 Yanac

A vulnerability classified as critical has been found in Yuzutech Kroki up to 0.31.1. The affected element is an unknown function of the file mermaid/src/worker.js of the component Mermaid Companion. The manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-102356. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More