Beyond the Canvas: Exploiting an Unsanitized Side-Channel in draw.io
CVE-2026-46642 : Imagine opening a .drawio file and having your entire design silently exfiltrated to a remote server—all by a simple drag-and-drop.
May 12, 20263 min read37
Command Palette
Search for a command to run...
#security
Articles tagged with #security