Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22242.json"