Dayuanjiang

3 CVEs in 2 Dayuanjiang products, including Next-Ai-Draw-Io, Next Ai Draw.io. Newest: CVE-2026-73037 (2026-08-13).

Dayuanjiang products with known CVEs

ProductCVEs
Next-Ai-Draw-Io3
Next Ai Draw.io1
Dayuanjiang CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73037Medium6.12026-08-13Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter that is interpolated without escaping i…
CVE-2026-72777High8.62026-08-13Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only ch…
CVE-2026-40608Medium6.22026-04-21Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three P…