CVE-2026-71436 | mermaid-js Mermaid up to 10.9.7/11.16.0 XY Charts setXAxisRangeData infinite loop

A vulnerability labeled as problematic has been found in mermaid-js Mermaid up to 10.9.7/11.16.0. This affects the function setXAxisRangeData of the component XY Charts. Such manipulation leads to infinite loop.

This vulnerability is referenced as CVE-2026-71436. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More