Vulnerabilities > Diagrams > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-27 | CVE-2023-3973 | Unspecified vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3. | 6.1 |
| 2023-06-01 | CVE-2023-3026 | Unspecified vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8. | 6.1 |
| 2022-11-07 | CVE-2022-3873 | Cross-site Scripting vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2. | 6.1 |
| 2022-09-16 | CVE-2022-3223 | Unspecified vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1. | 6.1 |
| 2022-09-08 | CVE-2022-3138 | Unspecified vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. | 6.1 |
| 2022-09-08 | CVE-2022-3148 | Unspecified vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0. | 6.1 |
| 2022-09-05 | CVE-2022-3127 | Unspecified vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8. | 5.4 |
| 2022-06-09 | CVE-2022-2014 | Code Injection vulnerability in Diagrams Drawio Code Injection in GitHub repository jgraph/drawio prior to 19.0.2. | 5.4 |
| 2022-06-09 | CVE-2022-2015 | Cross-site Scripting vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2. | 5.4 |
| 2022-05-19 | CVE-2022-1730 | Cross-site Scripting vulnerability in Diagrams Drawio Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4. | 4.6 |