Threats affecting pkg:github/next-ai-draw-io

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostnames that bypass string validation but resolve to internal addresses, allowing them to reach arbitrary internal HTTP services and exfiltrate responses including cloud metadata.

Next AI Draw.io versions 0.2.1 through 0.4.16 contain a reflected cross-site scripting (XSS) vulnerability in the mcp query parameter. This parameter is interpolated into HTML and JavaScript without proper escaping, allowing attackers to craft malicious URLs that execute arbitrary JavaScript in the localhost origin. This can lead to exfiltration of diagram sessions and API data. The vulnerability has a medium severity with a CVSS score of 5.1. No official patch or remediation guidance is currently available.