Login Request a demo
PL
Product
Plantuml
by Plantuml · last CVE Jan 16, 2026
5
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 2High 0Medium 3Low 0
Severity
All severities5Critical2High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Plantuml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-3432
10.0
1%
Jun 27
Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9
Affected: before 1.2023.9
CVE-2022-1379
9.1
2%
May 14
URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5
Affected: before 1.2022.5
CVE-2026-0858
6.1
0%
Jan 16
Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz…
Affected: before 1.2026.0
CVE-2022-1231
6.1
2%
Apr 15
XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4
Affected: before 1.2022.4
CVE-2023-3431
5.3
1%
Jun 27
Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9
Affected: before 1.2023.9
Showing 5