2 matches found
CVE-2026-58504
draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file can execute attacker-controlled JavaScript in the draw.io origin when selected cells are processed by TextFormatPanel.addFont in...
6.1CVSS0.0025EPSS
SaveExploits0References3
EUVD-2026-83987
draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file can execute attacker-controlled JavaScript in the draw.io origin when selected cells are processed by TextFormatPanel.addFont in...
6.1CVSS6AI score0.0025EPSS
SaveExploits0References3
20