CVE-2022-1722: Diagrams Drawio

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses

Affected products

• Diagrams Drawio: before 18.0.5 (fixed in 18.0.5)

Published 2022-05-16. Last modified 2026-06-17.