| Package | Affected versions | Patched versions |
|---|---|---|
| drawio | < 18.0.4 | 18.0.4 |
SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free