package

npm/@excalidraw/excalidraw

pkg:npm/%40excalidraw/excalidraw

MEDIUMnpm

Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering)

Modified: 5/5/2026

MEDIUM6.1npm

Stored Cross-site Scripting (XSS) in excalidraw's web embed component

Modified: 9/10/2026

MEDIUM6.1npm

@excalidraw/excalidraw Cross-site Scripting vulnerability

Modified: 11/8/2023