Skip to content
OpenAdvisories

Vendor

jgraph

37 known vulnerabilities.

Products

jgraph/drawio 26 drawio 9 drawio-desktop 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.6
    CVE-2023-3974

    OS Command Injection in jgraph/drawio

    OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.

    jgraph jgraph/drawio
  • Critical 9.6
    CVE-2023-3973

    Cross-site Scripting (XSS) - Reflected in jgraph/drawio

    Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.

    jgraph jgraph/drawio
  • Critical 9.6
    CVE-2022-2014

    Code Injection in jgraph/drawio

    Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.

    jgraph jgraph/drawio
  • Critical 9.6
    CVE-2022-1575

    Arbitrary Code Execution through Sanitizer Bypass in jgraph/drawio

    Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary (remote) code execution in the desktop app. - Stored XSS in the web app.

    jgraph jgraph/drawio