Starstruk Logo MarkStarstruk

v0.18.1

konvajs/konvav0.18.1Apr 21, 2026by dwelle

AI Summary

This is a security patch release addressing an upstream Mermaid XSS vulnerability and updating TypeScript dependencies to ensure compatibility.

Key Highlights

  • Mitigated Mermaid XSS vulnerability (CVE-2025-54881 / GHSA-7rqq-prvp-x9jh).
  • Backported Mermaid XSS mitigation by updating `@excalidraw/mermaid-to-excalidraw` to version 2.2.2.
  • Pinned `@types/d3-dispatch` for compatibility with the TypeScript 0.18.x version.

Full Release Notes

Security patch release for `@excalidraw/excalidraw@0.18.x`, addressing upstream Mermaid XSS vulnerability CVE-2025-54881 / GHSA-7rqq-prvp-x9jh.

- Backports Mermaid XSS mitigation by updating `@excalidraw/mermaid-to-excalidraw` to `2.2.2`
- Pins `@types/d3-dispatch` for compatibility with the 0.18.x TypeScript version