CyberSecBulletin

DayuanJiang vulnerabilities

We track 1 vulnerability in DayuanJiang products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest DayuanJiang vulnerabilities

  • 8.6 High severity

    next-ai-draw-io: Server-Side Request Forgery

    CVE-2026-72777DayuanJiang

    Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostnames that bypa