npm/@excalidraw/excalidraw: medium
Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering)
Action: Upgrade @excalidraw/excalidraw to 0.18.1 or later.
npm i @excalidraw/excalidraw@0.18.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.18.0 | 0.18.1 | - |
Fixed versions
| 0.18.1 |
Sources
- osv: GHSA-39h7-pwv7-rc3x
- https://github.com/excalidraw/excalidraw/security/advisories/GHSA-39h7-pwv7-rc3x
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-7rqq-prvp-x9jh
- https://github.com/excalidraw/excalidraw
- https://github.com/excalidraw/excalidraw/releases/tag/v0.18.1
published · modified · JSON