CVE-2023-3974: Diagrams Drawio

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.

Affected products

• Diagrams Drawio: before 21.4.0 (fixed in 21.4.0)

Published 2023-07-27. Last modified 2026-06-17.