PT-2026-68807

CVE-2026-71439

Published

2026-08-06

Updated

2026-09-18

Description by

CVSS 4.0

5.3

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Mermaid versions 11.6.0 through 11.16.0

Description Radar Diagrams allow arbitrary large values for the ticks parameter. This can lead to high CPU usage and freeze the rendering webpage or JavaScript process for extended periods, potentially resulting in the process being terminated due to memory exhaustion (OOM).

Recommendations Update to version 11.16.1.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-606: Unchecked Input for Loop Condition

CWE-1322: Use of Blocking Code in Single-threaded, Non-blocking Context

Related identifiers

CVE-2026-71439