In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
CWE-1021