jgraph drawio-desktop

• CVE-2026-119333 High 7.8 draw.io Desktop allows Windows executable search-path hijacking 0.1%
• CVE-2026-114606 Medium 5.6 draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate) 0.4%