@excalidraw/excalidraw

Excalidraw as a React component
Licenses: MIT

Direct Vulnerabilities

Known vulnerabilities in the @excalidraw/excalidraw package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Cross-site Scripting (XSS)

>=0.16.0 <0.16.4>=0.17.0 <0.17.1-890ed9f>=0.17.2 <0.17.6
  • M
Cross-site Scripting (XSS)

<0.16.0

Package versions

459 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
0.18.120 Apr, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.010 Mar, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.728 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.628 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.525 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.425 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.324 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.221 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.113 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-ffcb67b16 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L