excalidraw Latest Vulnerabilities

Latest vulnerabilities published by excalidraw

JSON RSS CSV 🔔 Create Alert Trigger

24 September 2026

Cross-Site Scripting Vulnerability in Excalidraw's Imported File Handler
CVE-2026-97224
ExcalidrawExcalidraw5.3MEDIUM

17 April 2024

Stored XSS vulnerability in Excalidraw's web embeddable component
CVE-2024-32472
ExcalidrawExcalidraw6.1MEDIUM

16 August 2023

Excalidraw Vulnerable to Cross-site Scripting (XSS) via Embedded Links in Whiteboard Objects
CVE-2023-26140
Excalidraw@excalidraw/excalidraw6.1MEDIUM