CVE-2024-32472
1 advisory.
npm/@excalidraw/excalidraw CVE-2024-32472: medium 6.1
Stored Cross-site Scripting (XSS) in excalidraw's web embed component
Action: Upgrade @excalidraw/excalidraw to 0.16.4 or later.
npm i @excalidraw/excalidraw@0.16.4npm i @excalidraw/excalidraw@0.17.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.16.0 | 0.16.4 | - |
| 0.17.0 | 0.17.6 | - |
Fixed versions
| 0.16.4 | 0.17.6 |
Sources
- osv: GHSA-m64q-4jqh-f72f
- https://github.com/excalidraw/excalidraw/security/advisories/GHSA-m64q-4jqh-f72f
- https://nvd.nist.gov/vuln/detail/CVE-2024-32472
- https://github.com/excalidraw/excalidraw/commit/6be752e1b6d776ccfbd3bb9eea17463cb264121d
- https://github.com/excalidraw/excalidraw/commit/988f81911ca58e3ca2583e0dd44a954dd00e09d0
- https://github.com/excalidraw/excalidraw
CVE-2024-32472 · published · modified · JSON