@excalidraw/excalidraw
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Stored Cross-site Scripting (XSS) in excalidraw's web embed component | @excalidraw/excalidraw | npm | Medium | Fix reported | |
| Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering) | @excalidraw/excalidraw@excalidraw/mermaid-to-excalidraw | npm | Medium | Fix reported | |
| @excalidraw/excalidraw Cross-site Scripting vulnerability | @excalidraw/excalidraw | npm | Medium | Fix reported |