Skip to content
OpenAdvisories

Package · Ubuntu

plantuml

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.1
    CVE-2026-0858

    PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams

    Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript int…

    plantuml plantuml net.sourceforge.plantuml:plantuml Debian Ubuntu Maven
  • Medium 5.3
    CVE-2023-3431

    Improper Access Control in plantuml/plantuml

    Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

    plantuml plantuml/plantuml plantuml plantuml Debian Ubuntu Maven
  • Critical 9.3
    CVE-2022-1231

    XSS via Embedded SVG in SVG Diagram Format in plantuml/plantuml

    XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code exe…

    plantuml plantuml/plantuml plantuml plantuml Debian Ubuntu