CVE-2026-71439 Mermaid radar diagrams are vulnerable to DoS

🗓️ 06 Aug 2026 20:01:04Reported by GitHub_MType

cve🔗 www.cve.org👁 8 Views

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary large values for the ticks parameter, which can cause high CPU usage ...

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2026-71439 Mermaid radar diagrams are vulnerable to DoS	6 Aug 202620:01	–	cvelist
Github Security Blog	Mermaid radar diagrams are vulnerable to DoS	6 Aug 202620:01	–	github
OSV	GHSA-RHH3-JPG6-66XH Mermaid radar diagrams are vulnerable to DoS	6 Aug 202620:01	–	osv
Patchstack	NPM: Mermaid radar diagrams are vulnerable to DoS	6 Aug 202620:01	–	patchstack

Vulners

Node

mermaid-js mermaidRange11.6.0–11.16.1

[
  {
    "vendor": "mermaid-js",
    "product": "mermaid",
    "versions": [
      {
        "version": ">= 11.6.0, < 11.16.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1
github	www.github.com/mermaid-js/mermaid/pull/8022
github	www.github.com/mermaid-js/mermaid/security/advisories/GHSA-rhh3-jpg6-66xh
github	www.github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e

06 Aug 2026 20:01Current

CVSS 45.3