Vulnerabilities > Diagrams > Drawio > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-06-09 | CVE-2022-2015 | Cross-site Scripting vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2. | 3.5 |
| 2022-06-09 | CVE-2022-2014 | Code Injection vulnerability in Diagrams Drawio Code Injection in GitHub repository jgraph/drawio prior to 19.0.2. | 3.5 |
| 2022-05-16 | CVE-2022-1722 | Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. | 3.3 |