Advisories · Technology
DayuanJiang next-ai-draw-io.
Every CVE that names DayuanJiang next-ai-draw-io among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url
- DayuanJiang next-ai-draw-io
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter
- DayuanJiang next-ai-draw-io
- Cross-site scripting (XSS)
- CVSS 6.2 Medium
Next AI Draw.io: Unbounded HTTP Body — Denial of Service
- DayuanJiang next-ai-draw-io
- Denial of service