Vulnerabilities > Diagrams > Drawio > 18.0.7
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-05 | CVE-2022-3127 | Unspecified vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8. | 5.4 |
| 2022-09-02 | CVE-2022-3065 | Unspecified vulnerability in Diagrams Drawio Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8. | 7.5 |
| 2022-06-09 | CVE-2022-2014 | Code Injection vulnerability in Diagrams Drawio Code Injection in GitHub repository jgraph/drawio prior to 19.0.2. | 5.4 |
| 2022-06-09 | CVE-2022-2015 | Cross-site Scripting vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2. | 5.4 |
| 2022-05-25 | CVE-2022-1815 | Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2. | 7.5 |
| 2022-05-20 | CVE-2022-1784 | Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.8. | 7.5 |