M
Vendor security profile
mermaid-js
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%100
Avg. CVSS5.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
5
0
0
CVE KEV
CVE severity distribution
5toplam CVE
Medium4 (80%)
Low1 (20%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%20
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
5.3
CVE-2026-71439
Mermaid radar diagrams are vulnerable to DoS
M
Patch verifiedEPSS %1
2.4
CVE-2026-71438
Mermaid configuration APIs allow prototype pollution
M
Patch verifiedEPSS %0
5.3
CVE-2026-50159
Mermaid allows CSS injection applying to sibling elements of the diagram
M
Patch verifiedEPSS %1
6.5
CVE-2026-71437
Mermaid Architecture diagrams are vulnerable to prototype pollution
M
Patch verifiedEPSS %1
5.3
CVE-2026-71436
Mermaid XY Charts are vulnerable to an infinite loop DoS
M
Patch verifiedEPSS %1