Back Linuxsecurity

Ubuntu 22 Latest Graphviz Security Flaw 2025

Linuxsecurity •LinuxSecurity Advisories • February 9, 2026

PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case diagram - class diagram - activity diagram - component diagram - state diagram Update Information : Update to version 1.2026.1

PlantUML is a program allowing to draw UML diagrams, using a simple

and human readable text description. It is extremely useful for code

documenting, sketching project architecture during team conversations

PlantUML supports the following diagram types

Update to version 1.2026.1

* Sat Jan 31 2026 blinxen - 1:1.2026.1-1 - Update to verison 1.2026.1 (rhbz#2428317)

[ 1 ] Bug #2430307 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [epel-10] [ 2 ] Bug #2430308 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [fedora-42] [ 3 ] Bug #2430309 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [fedora-43] [ 4 ] Bug #2430310 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [epel-9]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-0d819a3a70' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High Risk Code Execution Vulnerability in PlantUML for Ubuntu 22 and 24 A security flaw affecting PlantUML, used for creating UML diagrams, has been identified in Ubuntu 22 and 24. This vulnerability allows for high-risk code execution, impacting users who rely on this tool for documentation and project architecture. Users are advised to update to version 1.2026.1 to mitigate the risk. 2 sources 40

Extracted Entities

Ubuntu 22 Latest Graphviz Security Flaw 2025

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (2)

Vulnerabilities (1)