CVE-2023-3975: Diagrams Drawio

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.

Affected products

• Diagrams Drawio: before 21.5.0 (fixed in 21.5.0)

Published 2023-07-27. Last modified 2026-06-17.