Approved changes feed: RSS · Atom
cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Diagrams (1dab7126-ffb0-5a93-bd89-d81d81b9d327) |
|---|---|
| Product | Drawio (4752bbc9-9269-5d5f-99c7-eda97274509d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jgraph/drawio |
purl2cpe | 2026-06-01 10:14:34.075258 |
pkg:maven/org.webjars.bowergithub.jgraph/drawio |
purl2cpe | 2026-06-01 10:14:34.075261 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3975 |
vulnerable | 2026-06-08 06:09:40.934607 |
OS Command Injection in jgraph/drawio
HIGH (8.3)
OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
Published: 2023-07-27T14:34:10.847Z
Updated: 2024-10-15T15:32:40.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3974 |
vulnerable | 2026-06-08 06:09:40.934203 |
OS Command Injection in jgraph/drawio
CRITICAL (9.6)
OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.
Published: 2023-07-27T14:33:31.671Z
Updated: 2024-10-15T15:36:08.407Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3973 |
vulnerable | 2026-06-08 06:09:40.933616 |
Cross-site Scripting (XSS) - Reflected in jgraph/drawio
CRITICAL (9.6)
Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
Published: 2023-07-27T14:33:11.271Z
Updated: 2024-10-15T15:36:46.194Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3398 |
vulnerable | 2026-06-08 06:09:39.487750 |
Denial of Service in jgraph/drawio
MEDIUM (5.3)
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.
Published: 2023-06-26T10:05:09.278Z
Updated: 2024-12-03T18:47:29.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3026 |
vulnerable | 2026-06-08 06:09:38.347455 |
Cross-site Scripting (XSS) - Stored in jgraph/drawio
MEDIUM (6.5)
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.
Published: 2023-06-01T00:00:00.000Z
Updated: 2025-01-10T18:55:55.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3873 |
vulnerable | 2026-06-08 05:48:22.513856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3223 |
vulnerable | 2026-06-08 05:47:19.750458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3148 |
vulnerable | 2026-06-08 05:47:19.559207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3138 |
vulnerable | 2026-06-08 05:47:19.537789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3133 |
vulnerable | 2026-06-08 05:47:19.530677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3127 |
vulnerable | 2026-06-08 05:47:19.520866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3065 |
vulnerable | 2026-06-08 05:47:19.119677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2015 |
vulnerable | 2026-06-08 05:42:50.057606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2014 |
vulnerable | 2026-06-08 05:42:50.057175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1815 |
vulnerable | 2026-06-08 05:39:13.980081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1784 |
vulnerable | 2026-06-08 05:39:13.908675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1774 |
vulnerable | 2026-06-08 05:39:13.887971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1767 |
vulnerable | 2026-06-08 05:39:13.882069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1730 |
vulnerable | 2026-06-08 05:39:13.805361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1727 |
vulnerable | 2026-06-08 05:39:13.799552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1723 |
vulnerable | 2026-06-08 05:39:13.794006 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1722 |
vulnerable | 2026-06-08 05:39:13.793579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1721 |
vulnerable | 2026-06-08 05:39:13.793214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1713 |
vulnerable | 2026-06-08 05:39:13.785106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1711 |
vulnerable | 2026-06-08 05:39:13.781794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1575 |
vulnerable | 2026-06-08 05:39:13.481470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.