CVE-2026-71438

A flaw was found in Mermaid, a JavaScript tool for creating diagrams. The tool's configuration application programming interfaces APIs, specifically mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig, are vulnerable to prototype pollution. This occurs because these APIs...