v0.18.1

huggingface/smolagentsv0.18.1Apr 21, 2026by dwelle

AI Summary

A security patch release addressing an XSS vulnerability in the Mermaid library used by Excalidraw. It updates dependencies to mitigate the CVE and ensures compatibility with the 0.18.x TypeScript version.

Key Highlights

Security patch for Mermaid XSS vulnerability (CVE-2025-54881)
Updated @excalidraw/mermaid-to-excalidraw to version 2.2.2

Full Release Notes

Security patch release for `@excalidraw/excalidraw@0.18.x`, addressing upstream Mermaid XSS vulnerability CVE-2025-54881 / GHSA-7rqq-prvp-x9jh.

- Backports Mermaid XSS mitigation by updating `@excalidraw/mermaid-to-excalidraw` to `2.2.2`
- Pins `@types/d3-dispatch` for compatibility with the 0.18.x TypeScript version