CVE-2026-0858

Name
CVE-2026-0858
Description
Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to arbitrary script execution in the context of applications that render the SVG.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
report@snyk.io https://github.com/plantuml/plantuml/commit/6826315db092d2e432aeab1a0894e08017c6e4bd
report@snyk.io https://github.com/plantuml/plantuml/releases/tag/v1.2026.0
report@snyk.io https://security.snyk.io/vuln/SNYK-JAVA-NETSOURCEFORGEPLANTUML-14552230

Match rules

CPE URI Source package Min version Max version
net.sourceforge.plantuml:plantuml >= 0 < 1.2026.0
cpe:2.3:a:plantuml:plantuml:*:*:*:*:*:*:*:* plantuml >= None < 1.2026.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
plantuml edge-community 1.2025.10-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable
plantuml edge-community 1.2025.4-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable
plantuml edge-community 1.2025.3-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable
plantuml edge-community 1.2025.2-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable
plantuml edge-community 1.2025.1-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable
plantuml edge-community 1.2024.8-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable
plantuml edge-community 1.2024.7-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable
plantuml 3.23-community 1.2025.4-r0 Krystian Chachuła <krystian@krystianch.com> possibly vulnerable