jgraph drawio

5 known vulnerabilities in jgraph drawio, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-76898 CVSS 7.7 high draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.3.8, src/main/java/com/mxgraph/online/Utils.java…
  • CVE-2026-63416 CVSS 3.7 low draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7…
  • CVE-2026-63373 CVSS 4.2 medium draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, the OAuth callback handler in…
  • CVE-2026-63334 CVSS 6.8 medium draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, deployments with ENABLE_DRAWIO_PROXY=1 are…
  • CVE-2026-58504 CVSS 6.1 medium draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file…