Plantuml vulnerabilities

Products

• Plantuml 5
• Plantuml/plantuml 4

Newest

• plantuml PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams CVE-2026-0858 Fix available 5.1 MediumJanuary 16, 2026
• plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 more Server-Side Request Forgery (SSRF) in plantuml/plantuml CVE-2023-3432 Fix available 7.2 HighJune 27, 2023
• plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 more Improper Access Control in plantuml/plantuml CVE-2023-3431 Fix available 5.3 MediumJune 27, 2023
• plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 more URL Restriction Bypass in plantuml/plantuml CVE-2022-1379 7.2 HighMay 14, 2022
• plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 more XSS via Embedded SVG in SVG Diagram Format in plantuml/plantuml CVE-2022-1231 Fix available 9.3 CriticalApril 15, 2022