Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: plantuml Component: Plantuml Clear all filters
TI-2026-00639 CVE-2026-0858 · GHSA-hrvf-g648-rf3m

Cross-site scripting in net.sourceforge.plantuml:plantuml

Priority LOW 23

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00338 Published 2026-01-16 Partial fix · 1.2026.0 CWE-79
TI-2023-03207 CVE-2023-3432 · GHSA-ff3m-68vj-h86p

Server-Side Request Forgery (SSRF) in plantuml/plantuml

Priority MEDIUM 44

Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0087 Published 2023-06-27 Fixed in 1.2023.9 CWE-918
TI-2023-03206 CVE-2023-3431 · GHSA-p2mf-q26j-3xmh

Improper Access Control in plantuml/plantuml

Priority LOW 26

Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00866 Published 2023-06-27 Fixed in 1.2023.9 CWE-284
TI-2022-01260 CVE-2022-1379 · GHSA-8qqf-jx6g-2rcv

URL Restriction Bypass in plantuml/plantuml

Priority MEDIUM 43

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01617 Published 2022-05-14 Fixed in V1.2022.5 CWE-918