CVE-2026-50758

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

CVE-2026-50758

The CVE-2026-50758 entry concerns the software DayuanJiang next-ai-draw-io v0.4.13 and describes a Cross Site Scripting (XSS) vulnerability. The issue allows a remote attacker to execute arbitrary code via the mcp parameter . The connected documents confirm the vulnerability description but do no...

CVE-2026-50755

Technical details about CVE-2026-50755 are not publicly provided in the supplied documents. Monitor for updates; the initial description only mentions a disclosure via the X-Forwarded-For header without specifics.

CVE-2026-50756

The CVE-2026-50756 entry concerns DayuanJiang’s next-ai-draw-io version 0.4.13 with an issue in the x-ai-provider component. The description indicates a remote attacker can obtain sensitive information via this component, implying an information-disclosure weakness. The available documents do not...

CVE-2026-50757

CVE-2026-50757 describes a Directory Traversal vulnerability in DayuanJiang’s DayuanJiang next-ai-draw-io version 0.4.13 . The issue could allow a remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server component. Public sources in the connected documents confirm the affected ...

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

CVE-2026-50758

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

CVE-2026-50755

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...