Package · Debian

plantuml

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2026-0858

PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript int…

plantuml plantuml net.sourceforge.plantuml:plantuml Debian Ubuntu Maven

Jan 16, 2026
Medium 5.3

CVE-2023-3431

Improper Access Control in plantuml/plantuml

Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

plantuml plantuml/plantuml plantuml plantuml Debian Ubuntu Maven

Jun 27, 2023