Options to Graphviz
Posted: 17 Aug 2017, 16:48
A security vulnerability exists with Graphviz. Can another product be used in its place?
Hi,
Graphviz is used to support the PlantUML library which provides UML style rendering for some views, most notably the business process model. We have recently become aware ourselves that a vulnerability has been identified with Graphviz in version 2.34 and have updated the website to recommend version 2.38 or higher.
It is possible to run Essential Viewer without installing Graphviz however you may find some views do not render correctly. We have started to transition away from PlantUML and by extension, Graphviz but we don't have firm timescales to complete this.
If you have any further information regarding the Graphviz vulnerability you wish to share then do please let us know.
Thanks
Neil