Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
CVE-2026-40608Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers (/api/state, /api/restore, and /api/history-svg) that process incoming reques… medium Not checked Apr 21, 2026

Versions in the registry

0.4.13 (listed), 0.4.12, 0.4.11, 0.4.9, 0.4.7, 0.4.5, 0.4.4, 0.4.3