Dayuanjiang Next-Ai-Draw-Io
3 CVEs affecting Dayuanjiang Next-Ai-Draw-Io. Latest disclosed: 2026-08-13. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72777 | High | 8.6 | 2026-08-13 | Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only ch… |
CVE-2026-40608 | Medium | 6.2 | 2026-04-21 | Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three P… |
CVE-2026-73037 | Medium | 6.1 | 2026-08-13 | Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter that is interpolated without escaping i… |