Linux Distros Unpatched Vulnerability : CVE-2026-41159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermaid's default...

CVE-2026-41159

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.6 and 11.15.0, Mermaid's default configuration allows injecting CSS that applies outside of the Mermaid diagram via the fontFamily, themeCSS, and altFontFamily configuration...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @bubblesjs/vue-ai-chart (>=0.0.3, <=0.0.4) +157 more potentially affected by CVE-2026-41159 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.3, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.10.5, =15.1.25, =0.0.2, =0.0.10 and more Source cves: CVE-2026-41159 Source advisory: SNYK:JS-MERMAID-16642055...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @bubblesjs/vue-ai-chart (>=0.0.3, <=0.0.4) +157 more potentially affected by CVE-2026-41159 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.3, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.10.5, =15.1.25, =0.0.2, =0.0.10 and more Source cves: CVE-2026-41159 Source advisory: OSV:GHSA-87F9-HVMW-GH4P...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +243 more potentially affected by CVE-2026-41159 via mermaid (>=10.0.0, <=10.9.5)

mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-41159 Source advisory: SNYK:JS-MERMAID-16642055...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +243 more potentially affected by CVE-2026-41159 via mermaid (>=10.0.0, <=10.9.5)

mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-41159 Source advisory: OSV:GHSA-87F9-HVMW-GH4P...