We only accept security reports against the latest version in this repo or the version deployed to app.diagrams.net, if different.
Report at https://huntr.dev/bounties/disclose?target=https%3A%2F%2Fgithub.com%2Fjgraph%2Fdrawio&validSearch=true. There is a bug bounty program in place there.
- Issues relating to the PlantUML integration.
- Issues relating to the www.drawio.com web site.