{"api_version":"v1","generated_at":"2026-10-06T21:40:00+00:00","product":{"cve_count":26,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-jgraph-jgraph-drawio-e1263f0aea03","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"jgraph/drawio","next_cursor":null,"observations":[{"affected":"unspecified < 21.5.0","affected_versions_present":true,"cve_id":"CVE-2023-3975","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-3975","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-15T15:32:40.165Z","patch_url":"https://huntr.dev/bounties/4da96d20-78ac-462e-910c-a14db9062161","primary_source":"","published":"2023-07-27T14:34:10.847Z"},{"affected":"unspecified < 21.4.0","affected_versions_present":true,"cve_id":"CVE-2023-3974","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-3974","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-15T15:36:08.407Z","patch_url":"https://github.com/jgraph/drawio/commit/9d6532de36496e77d872d91b1947bb696607d623","primary_source":"","published":"2023-07-27T14:33:31.671Z"},{"affected":"unspecified < 21.6.3","affected_versions_present":true,"cve_id":"CVE-2023-3973","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-3973","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-15T15:36:46.194Z","patch_url":"https://github.com/jgraph/drawio/commit/1db2c2c653aa245d175d30c210239e3946bfcb95","primary_source":"","published":"2023-07-27T14:33:11.271Z"},{"affected":"unspecified < 18.1.3","affected_versions_present":true,"cve_id":"CVE-2023-3398","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-3398","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-12-03T18:47:29.317Z","patch_url":"https://huntr.dev/bounties/aa087215-80e1-433d-b870-650705630e69","primary_source":"","published":"2023-06-26T10:05:09.278Z"},{"affected":"unspecified < 21.2.8","affected_versions_present":true,"cve_id":"CVE-2023-3026","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-3026","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-10T18:55:55.645Z","patch_url":"https://github.com/jgraph/drawio/commit/c7ac634055c3edfabc7729fc4298a5ab7bfbf384","primary_source":"","published":"2023-06-01T00:00:00.000Z"},{"affected":"unspecified < 20.5.2","affected_versions_present":true,"cve_id":"CVE-2022-3873","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3873","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-05-01T17:59:19.909Z","patch_url":"https://huntr.dev/bounties/52a4085e-b687-489b-9ed6-f0987583ed77","primary_source":"","published":"2022-11-07T00:00:00.000Z"},{"affected":"unspecified < 20.3.1","affected_versions_present":true,"cve_id":"CVE-2022-3223","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3223","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T01:00:10.759Z","patch_url":"https://huntr.dev/bounties/125791b6-3a68-4235-8866-6bc3a52332ba","primary_source":"","published":"2022-09-16T10:50:12.000Z"},{"affected":"unspecified < 20.3.0","affected_versions_present":true,"cve_id":"CVE-2022-3133","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3133","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T01:00:10.491Z","patch_url":"https://huntr.dev/bounties/2d93052f-efc6-4647-9a6d-8b08dc251223","primary_source":"","published":"2022-09-09T17:55:09.000Z"},{"affected":"unspecified < 20.3.0","affected_versions_present":true,"cve_id":"CVE-2022-3138","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3138","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T01:00:10.521Z","patch_url":"https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366","primary_source":"","published":"2022-09-08T09:30:14.000Z"},{"affected":"unspecified < 20.3.0","affected_versions_present":true,"cve_id":"CVE-2022-3148","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3148","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T01:00:10.577Z","patch_url":"https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366","primary_source":"","published":"2022-09-08T09:25:09.000Z"},{"affected":"unspecified < 20.2.8","affected_versions_present":true,"cve_id":"CVE-2022-3127","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3127","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T01:00:10.534Z","patch_url":"https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da","primary_source":"","published":"2022-09-05T12:50:09.000Z"},{"affected":"unspecified < 20.2.8","affected_versions_present":true,"cve_id":"CVE-2022-3065","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-3065","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T01:00:10.156Z","patch_url":"https://huntr.dev/bounties/5f3bc4b6-1d53-46b7-a23d-70f5faaf0c76","primary_source":"","published":"2022-09-02T18:15:12.000Z"},{"affected":"unspecified < 19.0.2","affected_versions_present":true,"cve_id":"CVE-2022-2015","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-2015","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:24:43.934Z","patch_url":"https://github.com/jgraph/drawio/commit/3d3f819d7a04da7d53b37cc0ca4269c157ba2825","primary_source":"","published":"2022-06-08T08:30:14.000Z"},{"affected":"unspecified < 19.0.2","affected_versions_present":true,"cve_id":"CVE-2022-2014","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-2014","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:24:44.057Z","patch_url":"https://github.com/jgraph/drawio/commit/3d3f819d7a04da7d53b37cc0ca4269c157ba2825","primary_source":"","published":"2022-06-08T07:25:11.000Z"},{"affected":"unspecified < 18.1.2","affected_versions_present":true,"cve_id":"CVE-2022-1815","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1815","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:16:59.916Z","patch_url":"https://huntr.dev/bounties/6e856a25-9117-47c6-9375-52f78876902f","primary_source":"","published":"2022-05-25T08:15:15.000Z"},{"affected":"unspecified < 18.0.8","affected_versions_present":true,"cve_id":"CVE-2022-1784","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1784","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:16:59.867Z","patch_url":"https://github.com/jgraph/drawio/commit/c63f3a04450f30798df47f9badbc74eb8a69fbdf","primary_source":"","published":"2022-05-20T12:15:11.000Z"},{"affected":"unspecified < 18.0.4","affected_versions_present":true,"cve_id":"CVE-2022-1730","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1730","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:16:58.957Z","patch_url":"https://github.com/jgraph/drawio/commit/4deecee18191f67e242422abf3ca304e19e49687","primary_source":"","published":"2022-05-19T13:55:12.000Z"},{"affected":"unspecified < 18.0.7","affected_versions_present":true,"cve_id":"CVE-2022-1774","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1774","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:16:59.870Z","patch_url":"https://github.com/jgraph/drawio/commit/c63f3a04450f30798df47f9badbc74eb8a69fbdf","primary_source":"","published":"2022-05-18T20:40:10.000Z"},{"affected":"unspecified < 18.0.7","affected_versions_present":true,"cve_id":"CVE-2022-1767","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1767","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:16:59.753Z","patch_url":"https://github.com/jgraph/drawio/commit/c63f3a04450f30798df47f9badbc74eb8a69fbdf","primary_source":"","published":"2022-05-18T15:45:11.000Z"},{"affected":"unspecified < 18.0.6","affected_versions_present":true,"cve_id":"CVE-2022-1727","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1727","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:16:58.942Z","patch_url":"https://github.com/jgraph/drawio/commit/4deecee18191f67e242422abf3ca304e19e49687","primary_source":"","published":"2022-05-18T10:25:12.000Z"},{"affected":"unspecified < 18.0.5","affected_versions_present":true,"cve_id":"CVE-2022-1711","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1711","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:10:03.912Z","patch_url":"https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae","primary_source":"","published":"2022-05-17T12:40:09.000Z"},{"affected":"unspecified < 18.0.6","affected_versions_present":true,"cve_id":"CVE-2022-1723","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1723","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:16:58.890Z","patch_url":"https://huntr.dev/bounties/619851a4-2a08-4196-80e9-ab41953491d8","primary_source":"","published":"2022-05-17T08:35:10.000Z"},{"affected":"unspecified < 18.0.4","affected_versions_present":true,"cve_id":"CVE-2022-1713","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1713","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:10:03.954Z","patch_url":"https://huntr.dev/bounties/cad3902f-3afb-4ed2-abd0-9f96a248de11","primary_source":"","published":"2022-05-16T14:31:52.000Z"},{"affected":"unspecified < 18.0.5","affected_versions_present":true,"cve_id":"CVE-2022-1721","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1721","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:10:03.857Z","patch_url":"https://github.com/jgraph/drawio/commit/01ccb271d34258872b859c0fc1d253cc81341917","primary_source":"","published":"2022-05-16T14:31:26.000Z"},{"affected":"unspecified < 18.0.5","affected_versions_present":true,"cve_id":"CVE-2022-1722","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1722","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:10:03.906Z","patch_url":"https://huntr.dev/bounties/c903d563-ba97-44e9-b421-22bfab1e0cbd","primary_source":"","published":"2022-05-16T14:31:21.000Z"},{"affected":"unspecified < 18.0.0","affected_versions_present":true,"cve_id":"CVE-2022-1575","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1575","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T00:10:03.557Z","patch_url":"https://github.com/jgraph/drawio/commit/f768ed73875d5eca20110b9c1d72f2789cd1bab7","primary_source":"","published":"2022-05-05T11:45:12.000Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"jgraph"}}