Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS

🗓️ 11 May 2026 19:36:55Reported by GitHub Advisory DatabaseType

Mermaid gantt charts v11.14.0 and earlier are vulnerable to infinite loop DoS when excludes all dates; patches exist in newer versions.

Reporter	Title	Published	Views	Family All 24
ATTACKERKB	CVE-2026-41150	29 May 202613:54	–	attackerkb
Chainguard	CVE-2026-41150 vulnerabilities	18 May 202619:18	–	cgr
Circl	CVE-2026-41150	29 May 202617:06	–	circl
CNNVD	Mermaid 安全漏洞	29 May 202600:00	–	cnnvd
CVE	CVE-2026-41150	29 May 202613:54	–	cve
Cvelist	CVE-2026-41150 Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS	29 May 202613:54	–	cvelist
Debian CVE	CVE-2026-41150	29 May 202613:54	–	debiancve
EUVD	EUVD-2026-33325	29 May 202613:54	–	euvd
NVD	CVE-2026-41150	29 May 202615:16	–	nvd
OSV	CGA-8JPW-2G7X-W3H9	18 May 202619:30	–	osv

Vulners

Node

mermaid_project mermaidRange11.0.0-alpha.1–11.14.0npm

Source	Link
github	www.github.com/mermaid-js/mermaid/security/advisories/GHSA-6m6c-36f7-fhxh
github	www.github.com/mermaid-js/mermaid/commit/a59ea56174712ee5430dfd5bc877cb5151f501a6
github	www.github.com/mermaid-js/mermaid/commit/faafb5d49106dd32c367f3882505f2dd625aa30e
github	www.github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.15.0
github	www.github.com/mermaid-js/mermaid/releases/tag/v10.9.6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41150
github	www.github.com/advisories/GHSA-6m6c-36f7-fhxh

09 Jun 2026 10:28Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.3

CVSS 45.3

EPSS0.00055

SSVC