Dayuanjiang

3 CVEs across 2 Dayuanjiang products. Browse Dayuanjiang vulnerabilities, severities, and proof-of-concept exploits.

Dayuanjiang products with known CVEs

ProductCVEs
Next-Ai-Draw-Io3
Next Ai Draw.io1
Dayuanjiang CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73037Medium6.12026-08-13Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter that is interpolated without escaping i…
CVE-2026-72777High8.62026-08-13Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only ch…
CVE-2026-40608Medium6.22026-04-21Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three P…