Approved changes feed: RSS · Atom

cpe:2.3:a:jgraph:jgraph/drawio:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJgraph (9ddf1cc8-d169-575f-991c-b907265ce712)
ProductJgraph/Drawio (3a836f1c-1b52-55da-aaba-7921bab53bde)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3975 vulnerable 2026-06-08 06:09:40.934577 OS Command Injection in jgraph/drawio
HIGH (8.3)
OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
Published: 2023-07-27T14:34:10.847Z
Updated: 2024-10-15T15:32:40.165Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3974 vulnerable 2026-06-08 06:09:40.934053 OS Command Injection in jgraph/drawio
CRITICAL (9.6)
OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.
Published: 2023-07-27T14:33:31.671Z
Updated: 2024-10-15T15:36:08.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3973 vulnerable 2026-06-08 06:09:40.933586 Cross-site Scripting (XSS) - Reflected in jgraph/drawio
CRITICAL (9.6)
Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
Published: 2023-07-27T14:33:11.271Z
Updated: 2024-10-15T15:36:46.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3398 vulnerable 2026-06-08 06:09:39.487706 Denial of Service in jgraph/drawio
MEDIUM (5.3)
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.
Published: 2023-06-26T10:05:09.278Z
Updated: 2024-12-03T18:47:29.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3026 vulnerable 2026-06-08 06:09:38.346559 Cross-site Scripting (XSS) - Stored in jgraph/drawio
MEDIUM (6.5)
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.
Published: 2023-06-01T00:00:00.000Z
Updated: 2025-01-10T18:55:55.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3873 vulnerable 2026-06-08 05:48:22.512787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3223 vulnerable 2026-06-08 05:47:19.750316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3148 vulnerable 2026-06-08 05:47:19.559161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3138 vulnerable 2026-06-08 05:47:19.537752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3133 vulnerable 2026-06-08 05:47:19.530634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3127 vulnerable 2026-06-08 05:47:19.520828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3065 vulnerable 2026-06-08 05:47:19.118930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2015 vulnerable 2026-06-08 05:42:50.057568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2014 vulnerable 2026-06-08 05:42:50.056439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1815 vulnerable 2026-06-08 05:39:13.980031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1784 vulnerable 2026-06-08 05:39:13.908620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1774 vulnerable 2026-06-08 05:39:13.887936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1767 vulnerable 2026-06-08 05:39:13.882025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1730 vulnerable 2026-06-08 05:39:13.805321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1727 vulnerable 2026-06-08 05:39:13.799510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1723 vulnerable 2026-06-08 05:39:13.793868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1722 vulnerable 2026-06-08 05:39:13.793549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1721 vulnerable 2026-06-08 05:39:13.793064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1713 vulnerable 2026-06-08 05:39:13.785063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1711 vulnerable 2026-06-08 05:39:13.781752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1575 vulnerable 2026-06-08 05:39:13.480772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.