PatchTheCVEmermaid project vulnerabilities
Recent CVEs affecting mermaid project products. 2 tracked.
mermaid project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-05-29. Highest priority: CVE-2026-41159 (score 34/100).
- CVE-2026-41159 MEDIUM 5.3 UPGRADE Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
- CVE-2026-41150 MEDIUM 5.3 UPGRADE Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts
FAQ
How do I fix mermaid project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mermaid project being exploited right now?
None of the tracked mermaid project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mermaid project CVE should I patch first?
CVE-2026-41159 currently ranks highest (34/100): Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.