All 3 CVE vulnerabilities found in next-ai-draw-io, with AI-generated Chinese analysis, references, and POCs.
Vendor: DayuanJiang
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-72777 | Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url CWE-918 | 8.6 | High | 2026-08-13 |
| CVE-2026-73037 | Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter CWE-79 | 6.1 | Medium | 2026-08-13 |
| CVE-2026-40608 | Next AI Draw.io: Unbounded HTTP Body — Denial of Service CWE-770 | 6.2 | Medium | 2026-04-21 |
All 3 known CVE vulnerabilities affecting next-ai-draw-io with full Chinese analysis, references, and POCs where available.