plantuml

4 results · Feed

• Medium 6.1
  CVE-2026-0858

  PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams

  Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript int…

  plantuml plantuml net.sourceforge.plantuml:plantuml Debian Ubuntu Maven
  Jan 16, 2026
• High 7.2
  CVE-2023-3432

  Server-Side Request Forgery (SSRF) in plantuml/plantuml

  Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.

  plantuml plantuml/plantuml plantuml net.sourceforge.plantuml:plantuml Debian Maven
  Jun 27, 2023
• Medium 5.3
  CVE-2023-3431

  Improper Access Control in plantuml/plantuml

  Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

  plantuml plantuml/plantuml plantuml plantuml Debian Ubuntu Maven
  Jun 27, 2023
• Critical 9.3
  CVE-2022-1231

  XSS via Embedded SVG in SVG Diagram Format in plantuml/plantuml

  XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code exe…

  plantuml plantuml/plantuml plantuml plantuml Debian Ubuntu
  Apr 15, 2022