Skip to content
OpenAdvisories

Package · Debian

node-mermaid

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.4
    CVE-2026-71438

    Mermaid configuration APIs allow prototype pollution

    Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's configuration setters (mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig) merge caller-suppl…

    mermaid-js mermaid node-mermaid mermaid Debian Ubuntu npm