PatchTheCVEmermaid vulnerabilities and fixes
Recent CVEs affecting mermaid, with upgrade or downgrade steps. 2 tracked.
mermaid has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-05-29. Highest priority: CVE-2026-41159 (score 34/100).
- CVE-2026-41159 MEDIUM 5.3 UPGRADE Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
- CVE-2026-41150 MEDIUM 5.3 UPGRADE Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
FAQ
How do I fix mermaid vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mermaid being exploited right now?
None of the tracked mermaid CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mermaid CVE should I patch first?
CVE-2026-41159 currently ranks highest (34/100): Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.