Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-50757 1 Dayuanjiang 1 Next-ai-draw-io 2026-08-03 7.8 High
Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server
CVE-2026-50758 1 Dayuanjiang 1 Next-ai-draw-io 2026-08-03 8.1 High
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter