Lucene search
+L

1 matches found

OSV
OSV
added 4 days ago5 views

CVE-2026-71438 Mermaid configuration APIs allow prototype pollution

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's configuration setters mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig merge caller-supplied configuration into Mermaid's interna...

2.4CVSS5.4AI score
SaveExploits0References8
Rows per page
Query Builder