Skip to contentDiagrams Drawio vulnerabilities
- diagrams drawiodraw.io: XSS via crafted cell label when opening a .drawio fileCVE-2026-466426.1 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreOS Command Injection in jgraph/drawioCVE-2023-39758.3 High
- diagrams drawio, jgraph jgraph/drawio +1 moreOS Command Injection in jgraph/drawioCVE-2023-39749.6 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Reflected in jgraph/drawioCVE-2023-39739.6 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreDenial of Service in jgraph/drawioCVE-2023-33985.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Stored in jgraph/drawioCVE-2023-30266.5 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - DOM in jgraph/drawioCVE-2022-38736.5 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Stored in jgraph/drawioCVE-2022-32234.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreOS Command Injection in jgraph/drawioCVE-2022-31337.0 High
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Generic in jgraph/drawioCVE-2022-31384.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Generic in jgraph/drawioCVE-2022-31485.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Stored in jgraph/drawioCVE-2022-31275.5 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreImproper Access Control in jgraph/drawioCVE-2022-30655.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Stored in jgraph/drawioCVE-2022-20156.1 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCode Injection in jgraph/drawioCVE-2022-20149.6 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreExposure of Sensitive Information to an Unauthorized Actor in jgraph/drawioCVE-2022-18155.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawioCVE-2022-17847.5 High
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Stored in jgraph/drawioCVE-2022-17306.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreExposure of Sensitive Information to an Unauthorized Actor in jgraph/drawioCVE-2022-17748.2 High
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawioCVE-2022-17677.5 High
- diagrams drawio, jgraph jgraph/drawio +1 moreImproper Input Validation in jgraph/drawioCVE-2022-17278.3 High
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawioCVE-2022-17117.5 High
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawioCVE-2022-17237.5 High
- diagrams drawio, jgraph jgraph/drawio +1 moreSSRF on /proxy in jgraph/drawioCVE-2022-17137.5 High
- diagrams drawio, jgraph jgraph/drawio +1 morePath Traversal in WellKnownServlet in jgraph/drawioCVE-2022-17217.5 High
- diagrams drawio, jgraph jgraph/drawio +1 moreSSRF in editor's proxy via IPv6 link-local address in jgraph/drawioCVE-2022-17227.5 High
- diagrams drawio, jgraph jgraph/drawio +1 moreArbitrary Code Execution through Sanitizer Bypass in jgraph/drawioCVE-2022-15759.6 Critical