@excalidraw/excalidraw

Excalidraw as a React component
Licenses: MIT

Direct Vulnerabilities

Known vulnerabilities in the @excalidraw/excalidraw package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Cross-site Scripting (XSS)

>=0.16.0 <0.16.4>=0.17.0 <0.17.1-890ed9f>=0.17.2 <0.17.6
  • M
Cross-site Scripting (XSS)

<0.16.0

Package versions

455 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
0.18.010 Mar, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.728 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.628 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.525 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.425 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.324 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.221 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-rc.113 Feb, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-ffcb67b16 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.18.0-f87f6d08614 Aug, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L