Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.

diagrams

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.

diagrams

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.

diagrams

Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.

diagrams

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1.

diagrams

OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.

diagrams

Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

diagrams

Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

diagrams

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.

diagrams

Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.

diagrams

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.

diagrams

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.

diagrams

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2.

diagrams

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.8.

diagrams

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4.

diagrams

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.

diagrams

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.

diagrams

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.

diagrams

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.

diagrams

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.

diagrams

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses

diagrams