Log in Start free

DayuanJiang

Products

ProductCVEsExploitedLatest
next-ai-draw-io3–Aug 13, 2026

Exploited and recent CVEs

  • CVE-2026-72777 High 8.6 Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url 0.4%
  • CVE-2026-73037 Medium 6.1 Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter 0.3%
  • CVE-2026-40608 Medium 6.2 Next AI Draw.io: Unbounded HTTP Body — Denial of Service 0.1%