CVE-2026-115762 | JGraph draw.io up to 31.1.4 GraphML Decoder cross site scripting

November 4, 2026 Yanac

A vulnerability described as problematic has been identified in JGraph draw.io up to 31.1.4. This issue affects some unknown processing of the component GraphML Decoder. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-115762. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More