Homepage

net.sourceforge.plantuml:plantuml@1.2025.4

  • latest version

    1.2026.9

  • latest non vulnerable version

    8059

  • first published

    56 years ago

  • latest version published

    12 days ago

  • licenses detected

  • package registry

    View on Maven Central Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the net.sourceforge.plantuml:plantuml package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Stored XSS

    Affected versions of this package are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to arbitrary script execution in the context of applications that render the SVG.

    How to fix Stored XSS?

    Upgrade net.sourceforge.plantuml:plantuml to version 1.2026.0 or higher.

    [,1.2026.0)
    Go back to all versions of this package