next-ai-draw-io vulnerabilities

CVEs whose affected-version data names the next-ai-draw-io package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-72777High· 8.6PoC

2mo ago

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can sup…

▾ MidnightDayuanJiang · next-ai-draw-ioEPSS 0.43%via NVD