CVE-2022-2015
Cross-site Scripting (XSS) – Stored in GitHub repository jgraph/drawio prior to 19.0.2.
Date published : 2022-06-08
https://huntr.dev/bounties/0d32f448-155c-4b71-9291-9e8bcd522b37
https://github.com/jgraph/drawio/commit/3d3f819d7a04da7d53b37cc0ca4269c157ba2825