Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-50757
7.8
HIGHCVSS v3
Published
July 21, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server
DayuanJiang/next-ai-draw-io
GitHubA next.js web application that integrates AI capabilities with draw.io diagrams. This app allows you to create, modify, and enhance diagrams through natural language commands and AI-assisted visualization.
GitHubA next.js web application that integrates AI capabilities with draw.io diagrams. This app allows you to create, modify, and enhance diagrams through natural language commands and AI-assisted visualization.NVD