Skip to content
OpenAdvisories

Vendor

DayuanJiang

3 known vulnerabilities.

Products

next-ai-draw-io 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-72777

    Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url

    Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostnames that byp…

    DayuanJiang next-ai-draw-io