unstale

npm / @excalidraw/excalidraw

@excalidraw/excalidraw

What changed in @excalidraw/excalidraw 0.18, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-20.

2 security

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

@excalidraw/excalidraw 0.182 changes

Security 2

  • Backports a Mermaid XSS mitigation to address CVE-2025-54881 / GHSA-7rqq-prvp-x9jh.

    0.18.1release notes

  • Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering)

    0.18.1security advisory