Jgraph Drawio-desktop vulnerabilities

• jgraph drawio-desktop draw.io Desktop allows Windows executable search-path hijacking CVE-2026-119333 7.8 HighOctober 30, 2026
• jgraph drawio-desktop draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate) CVE-2026-114606 5.6 MediumOctober 22, 2026