CNNVD-202508-110 Information

CNNVD ID

CNNVD-202508-110

CVE-2025-54132

  • CNNVD Published: 2025-08-01

Description (Chinese)

Cursor是Cursor开源的一个 AI 代码编辑器。 Cursor 1.3之前版本存在代码问题漏洞,该漏洞源于Mermaid允许嵌入图像,可能导致敏感信息泄露。

Description (English)

Cursor is an AI code editor at Cursor Open Source. There was a code gap in the pre-Cursor 1.3 version, which originated from Mermaid ’ s permission to embed images and could lead to the disclosure of sensitive information.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

Cursor

Published

2025-08-01

Last Modified

2026-02-24

References

https://github.com/cursor/cursor/security/advisories/GHSA-43wj-mwcc-x93p https://access.redhat.com/security/cve/cve-2025-54132 https://nvd.nist.gov/vuln/detail/CVE-2025-54132 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54132

Patch

https://cursor.com/downloads

Share on: