Vulnerabilities in jgraph
28 resultsCVE-2023-3026MEDIUMCross-site Scripting (XSS) - Stored in jgraph/drawioEPSS 0.5%CVE-2022-3138MEDIUMCross-site Scripting (XSS) - Generic in jgraph/drawioEPSS 0.5%CVE-2022-3148MEDIUMCross-site Scripting (XSS) - Generic in jgraph/drawioEPSS 0.5%CVE-2022-1722HIGHSSRF in editor's proxy via IPv6 link-local address in jgraph/drawioEPSS 0.5%CVE-2022-3127MEDIUMCross-site Scripting (XSS) - Stored in jgraph/drawioEPSS 0.5%CVE-2023-3973CRITICALCross-site Scripting (XSS) - Reflected in jgraph/drawioEPSS 0.3%CVE-2026-46642MEDIUMdraw.io: XSS via crafted cell label when opening a .drawio fileEPSS 0.2%CVE-2026-42195LOWUnvalidated gitlab URL parameter redirects OAuth authorize step to attacker-controlled hostEPSS 0.2%