jgraph Drawio Vulnerabilities

Jgraph Drawio vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

22 October 2026

Arbitrary Local File Disclosure in draw.io Desktop by JGraph
CVE-2026-114606
JgraphDrawio-desktop5.6MEDIUM

21 September 2026

Vulnerability in draw.io Application Exposes Internal IPv6 Resources
CVE-2026-76898
JgraphDrawio7.7HIGH
OAuth Callback Handler Vulnerability in draw.io by jgraph
CVE-2026-63373
JgraphDrawio4.2MEDIUM
Server-Side Request Forgery Vulnerability in draw.io by jgraph
CVE-2026-63334
JgraphDrawio6.8MEDIUM
Directory Traversal Vulnerability in draw.io by JGraph
CVE-2026-63416
JgraphDrawio3.7LOW
JavaScript Execution Vulnerability in draw.io by JGraph
CVE-2026-58504
JgraphDrawio6.1MEDIUM

10 June 2026

Arbitrary JavaScript Execution Vulnerability in draw.io by jgraph
CVE-2026-46642
JgraphDrawio6.1MEDIUM

8 May 2026

OAuth Vulnerability in draw.io by jgraph
CVE-2026-42195
JgraphDrawio3.4LOW