Known vulnerabilities in mermaid 10.9.7

Vendor: mermaid-js
Software: mermaid
Version: 10.9.7
Software CPE: cpe:2.3:a:mermaid-js:mermaid:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting mermaid version 10.9.7 mermaid 10.9.7 is affected by 3 vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140937 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-50159
CWE-94 Medium
No
No
10.9.8, 11.16.1 04.08.2026 SB2026080474
#VU140936 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-71438
CWE-1321 Medium
No
No
10.9.8, 11.16.1 04.08.2026 SB2026080474
#VU140935 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-71436
CWE-835 Low
No
No
10.9.8, 11.16.1 04.08.2026 SB2026080474