THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-rhh3-jpg6-66xh (medium) — Mermaid radar diagrams are vulnerable to DoS

[GHSA] GHSA-rhh3-jpg6-66xh (medium) — Mermaid radar diagrams are vulnerable to DoS

highgithub_advisoriesPublished 2026-08-06

GHSA-rhh3-jpg6-66xh Severity: medium CVE: CVE-2026-71439

Mermaid radar diagrams are vulnerable to DoS

### Impact

Mermaid radar diagrams allow arbitrary large values for `ticks`, which can cause high CPU usage, freezing the webpage/JavaScript process for long periods of time, until the process is eventually killed due to OOM/running out of memory.

#### Proof-of-concept

```txt radar-beta axis

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

59b22fad2b3bb04f87a476c84a8a2b24679e607esha1
CVE-2026-71439cve

Original source: https://github.com/advisories/GHSA-rhh3-jpg6-66xh