npm/mermaid CVE-2026-71439: medium, EPSS 0.53%
Mermaid radar diagrams are vulnerable to DoS
Action: Upgrade mermaid to 11.16.1 or later.
npm i mermaid@11.16.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.6.0 | 11.16.1 | - |
Fixed versions
| 11.16.1 |
Sources
- osv: GHSA-rhh3-jpg6-66xh
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-rhh3-jpg6-66xh
- https://github.com/mermaid-js/mermaid/pull/8022
- https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e
- https://github.com/mermaid-js/mermaid
- https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1
CVE-2026-71439 · published · modified · JSON