Excalidraw vulnerabilities

Products

• Excalidraw 3

Newest

• excalidraw Excalidraw Imported File restore.ts cross site scripting CVE-2026-97224 5.3 MediumSeptember 24, 2026
• excalidraw excalidraw vulnerable to a Stored XSS in excalidraw's web embed component CVE-2024-32472 Fix available 6.1 MediumApril 17, 2024
• excalidraw @excalidraw/excalidraw Cross-site Scripting vulnerability CVE-2023-26140 Fix available 6.1 MediumAugust 16, 2023