CVE-2026-71437 | mermaid-js Mermaid up to 11.16.0 Architecture Diagrams prototype pollution

A vulnerability marked as critical has been reported in mermaid-js Mermaid up to 11.16.0. This impacts an unknown function of the component Architecture Diagrams. Performing a manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability is identified as CVE-2026-71437. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More