excalidraw

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

excalidraw records in CISA KEV

No excalidraw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Excalidraw 1 record LOW

Records

1 record in Excalidraw · all components

TI-2023-11364 CVE-2023-26140 · GHSA-v7v8-gjv7-ffmr

Cross-site scripting in @excalidraw/excalidraw

LOW 28

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting (XSS) via embedded links in whiteboard objects due to improper input sanitization.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00561 Published 2023-08-16 Fixed in 0.15.3 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0