All packages
jgraph/drawio vulnerabilities
5 known CVE vulnerabilities in jgraph/drawio, translated and rated.
- CVE-2023-3975Critical
There is an OS Command Injection vulnerability in the GitHub repository jgraph/drawio prior to version 21.5.0.
- CVE-2023-3974Critical
There is an OS Command Injection vulnerability in the GitHub repository jgraph/drawio prior to version 21.4.0.
- CVE-2023-3973Medium
A Cross-site Scripting (XSS) vulnerability is reflected in the GitHub repository jgraph/drawio prior to version 21.6.3.
- CVE-2023-3398High
Denial of Service vulnerability exists in the GitHub repository jgraph/drawio prior to version 18.1.3.
- CVE-2023-3026Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository jgraph/drawio prior to version 21.2.8, allowing for the storage of malicious code.