Diagrams vulnerabilities

Products

• Drawio 27

Newest

• diagrams drawio draw.io: XSS via crafted cell label when opening a .drawio file CVE-2026-46642 6.1 MediumJune 10, 2026
• diagrams drawio, jgraph jgraph/drawio +1 more OS Command Injection in jgraph/drawio CVE-2023-3975 8.3 HighJuly 27, 2023
• diagrams drawio, jgraph jgraph/drawio +1 more OS Command Injection in jgraph/drawio CVE-2023-3974 9.6 CriticalJuly 27, 2023
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Reflected in jgraph/drawio CVE-2023-3973 9.6 CriticalJuly 27, 2023
• diagrams drawio, jgraph jgraph/drawio +1 more Denial of Service in jgraph/drawio CVE-2023-3398 5.3 MediumJune 26, 2023
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Stored in jgraph/drawio CVE-2023-3026 6.5 MediumJune 1, 2023
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - DOM in jgraph/drawio CVE-2022-3873 6.5 MediumNovember 7, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Stored in jgraph/drawio CVE-2022-3223 4.3 MediumSeptember 16, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more OS Command Injection in jgraph/drawio CVE-2022-3133 7.0 HighSeptember 9, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Generic in jgraph/drawio CVE-2022-3138 4.3 MediumSeptember 8, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Generic in jgraph/drawio CVE-2022-3148 5.3 MediumSeptember 8, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Stored in jgraph/drawio CVE-2022-3127 5.5 MediumSeptember 5, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Improper Access Control in jgraph/drawio CVE-2022-3065 5.3 MediumSeptember 2, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Stored in jgraph/drawio CVE-2022-2015 6.1 MediumJune 8, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Code Injection in jgraph/drawio CVE-2022-2014 9.6 CriticalJune 8, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio CVE-2022-1815 5.3 MediumMay 25, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Server-Side Request Forgery (SSRF) in jgraph/drawio CVE-2022-1784 7.5 HighMay 20, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Cross-site Scripting (XSS) - Stored in jgraph/drawio CVE-2022-1730 6.3 MediumMay 19, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio CVE-2022-1774 8.2 HighMay 18, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Server-Side Request Forgery (SSRF) in jgraph/drawio CVE-2022-1767 7.5 HighMay 18, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Improper Input Validation in jgraph/drawio CVE-2022-1727 8.3 HighMay 18, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Server-Side Request Forgery (SSRF) in jgraph/drawio CVE-2022-1711 7.5 HighMay 17, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Server-Side Request Forgery (SSRF) in jgraph/drawio CVE-2022-1723 7.5 HighMay 17, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more SSRF on /proxy in jgraph/drawio CVE-2022-1713 7.5 HighMay 16, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Path Traversal in WellKnownServlet in jgraph/drawio CVE-2022-1721 7.5 HighMay 16, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more SSRF in editor's proxy via IPv6 link-local address in jgraph/drawio CVE-2022-1722 7.5 HighMay 16, 2022
• diagrams drawio, jgraph jgraph/drawio +1 more Arbitrary Code Execution through Sanitizer Bypass in jgraph/drawio CVE-2022-1575 9.6 CriticalMay 5, 2022