DEBIAN-CVE-2026-71438

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's configuration setters mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig merge caller-supplied configuration into Mermaid's interna...

CVE-2026-71438

Mermaid (JavaScript) prior to versions 10.9.8 and 11.16.1 is vulnerable to prototype pollution via its configuration entry points mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig, which merge caller-supplied data into internal config using the assignWithDepth deep-merge h...