PT-2026-39887 · Mermaid · Mermaid
CVSS v4.0
5.3
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L |
Name of the Vulnerable Software and Affected Versions
Mermaid versions 11.14.0 and earlier
Mermaid versions prior to 10.9.6
Description
A denial-of-service issue occurs when rendering gantt charts if the
excludes attribute is used to exclude all dates. While mermaid.parse is not affected, the issue is triggered when calling the ganttDb.getTasks() function during diagram rendering.Recommendations
Update to version 11.15.0.
Update to version 10.9.6.
Exploit
Fix
DoS
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mermaid