Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-50758
8.1
HIGHCVSS v3
Published
July 21, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter
DayuanJiang/next-ai-draw-io
GitHubA next.js web application that integrates AI capabilities with draw.io diagrams. This app allows you to create, modify, and enhance diagrams through natural language commands and AI-assisted visualization.
GitHubA next.js web application that integrates AI capabilities with draw.io diagrams. This app allows you to create, modify, and enhance diagrams through natural language commands and AI-assisted visualization.NVD