CVE-2026-0858
1 advisory.
Maven/net.sourceforge.plantuml:plantuml CVE-2026-0858: medium 6.1
PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams
Action: Upgrade net.sourceforge.plantuml:plantuml to 1.2026.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2026.0 | - |
Fixed versions
| 1.2026.0 |
Sources
- osv: GHSA-hrvf-g648-rf3m
- https://nvd.nist.gov/vuln/detail/CVE-2026-0858
- https://github.com/plantuml/plantuml/commit/6826315db092d2e432aeab1a0894e08017c6e4bd
- https://github.com/plantuml/plantuml
- https://github.com/plantuml/plantuml/releases/tag/v1.2026.0
- https://security.snyk.io/vuln/SNYK-JAVA-NETSOURCEFORGEPLANTUML-14552230
CVE-2026-0858 · published · modified · JSON