drawio vulnerabilities

1 known vulnerability in drawio from Jgraph. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  drawio: Server-Side Request Forgery

  CVE-2026-76898Sep 21, 2026Jgraph

  draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.3.8, src/main/java/com/mxgraph/online/Utils.java checks IPv6 Unique Local Addresses in Utils.sanitizeUrl() by comparing the text prefixes fc00:: and fd00::, but the JDK re