v0.18.1
hkjarral/AVA-AI-Voice-Agent-for-Asteriskv0.18.1Apr 21, 2026by dwelle
AI Summary
This is a security patch release addressing a Mermaid XSS vulnerability (CVE-2025-54881) in Excalidraw by updating the Mermaid-to-Excalidraw library.
Key Highlights
- Backported Mermaid XSS mitigation
- Updated `@excalidraw/mermaid-to-excalidraw` to `2.2.2`
- Pinned `@types/d3-dispatch` for compatibility
New Features
- Security patch (XSS mitigation)
Full Release Notes
Security patch release for `@excalidraw/excalidraw@0.18.x`, addressing upstream Mermaid XSS vulnerability CVE-2025-54881 / GHSA-7rqq-prvp-x9jh. - Backports Mermaid XSS mitigation by updating `@excalidraw/mermaid-to-excalidraw` to `2.2.2` - Pins `@types/d3-dispatch` for compatibility with the 0.18.x TypeScript version