Vulnerability Database · npm · Package report
@tldraw/assets: vulnerability history, versions and safety
@tldraw/assets is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on @tldraw/assets 5.5.2 i
Updated on 23 Oct 2026
Good news: 5.5.2, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Little adoption
- Community Not enough data
What to do: Stay on 5.5.2 or newer. This can change: a vulnerability disclosed tomorrow can affect 5.5.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 5.5.2 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Last release this month i
- Licence non-standard i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for @tldraw/assets, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 5.6.0-next.f151f7f3ebd6 23 Oct 2026
- 5.6.0-canary.5662ecb9b693 23 Oct 2026
- 5.6.0-canary.71e9eae0502a 22 Oct 2026
- 5.6.0-canary.f283055556fc 22 Oct 2026
- 5.6.0-canary.8eceacba74f4 22 Oct 2026
- 5.6.0-canary.2e20442c7b46 22 Oct 2026
- 5.6.0-canary.4bbe73bbeb09 22 Oct 2026
- 5.6.0-next.568da2160ccd 21 Oct 2026
- 5.6.0-canary.e8eb1cf5635d 20 Oct 2026
- 5.6.0-canary.2d721051fbc0 20 Oct 2026
- 5.6.0-canary.5e46744c5daa 19 Oct 2026
- 5.6.0-canary.4e8f62261c4b 19 Oct 2026
- 5.6.0-canary.4f75edece146 19 Oct 2026
- 5.6.0-canary.83720dc295ed 19 Oct 2026
- 5.6.0-canary.5011feccb3cf 19 Oct 2026
- 5.6.0-canary.e9dc644668fc 19 Oct 2026
- 5.6.0-canary.75a3d6649ed7 19 Oct 2026
- 5.6.0-canary.919cc00455e5 19 Oct 2026
- 5.6.0-canary.90677090cf11 19 Oct 2026
- 5.6.0-canary.36e971d4feff 19 Oct 2026
- 5.6.0-canary.2cf23f0cd8c3 19 Oct 2026
- 5.6.0-canary.0bba15d71780 19 Oct 2026
- 5.6.0-canary.8a7b1a65ab4c 18 Oct 2026
- 5.6.0-canary.dd116535b138 16 Oct 2026
- 5.6.0-canary.91a4718829a5 16 Oct 2026
- 5.6.0-canary.1304f95496b7 16 Oct 2026
- 5.6.0-canary.415caa55a856 16 Oct 2026
- 5.6.0-canary.4010383220f7 16 Oct 2026
- 5.6.0-canary.9bbecbe7973d 15 Oct 2026
- 5.6.0-canary.bc6e58781b6d 15 Oct 2026
- 5.6.0-canary.f790b44c29fc 15 Oct 2026
- 5.6.0-canary.08f3388dcf16 15 Oct 2026
- 5.6.0-canary.694791e0aceb 14 Oct 2026
- 5.6.0-next.133b55acee83 14 Oct 2026
- 5.6.0-canary.e599aa1a1df7 13 Oct 2026
- 5.6.0-canary.dd9b57126e5d 13 Oct 2026
- 5.6.0-canary.0c497c75123d 13 Oct 2026
- 5.6.0-canary.73afd5568510 13 Oct 2026
- 5.6.0-canary.363f03cec5d6 13 Oct 2026
- 5.6.0-canary.7f68118c3f00 13 Oct 2026
- 5.6.0-canary.6ba36a05c604 13 Oct 2026
- 5.6.0-next.d6710de420bf 13 Oct 2026
- 5.6.0-canary.54884f358d22 13 Oct 2026
- 5.6.0-canary.41de65b8a92d 13 Oct 2026
- 5.6.0-canary.70a79c8f3128 12 Oct 2026
- 5.6.0-canary.ff4411b6d84d 12 Oct 2026
- 5.6.0-canary.7937be360bcb 09 Oct 2026
- 5.6.0-canary.b4e9c2726a8e 09 Oct 2026
- 5.6.0-next.0b1aaf8f5861 09 Oct 2026
- 5.6.0-canary.6af57fadf4b9 09 Oct 2026
- 5.6.0-canary.035b741dc331 06 Oct 2026
- 5.6.0-canary.db1c86ea7857 02 Oct 2026
- 5.6.0-next.65a0c658db13 02 Oct 2026
- 5.6.0-canary.54507eefc168 02 Oct 2026
- 5.5.2 02 Oct 2026
- 5.6.0-canary.b8f107a1f44a 02 Oct 2026
- 5.6.0-canary.1a0d13d54d15 02 Oct 2026
- 5.6.0-canary.c2f2385cb389 02 Oct 2026
- 5.6.0-next.ba1a08ddab81 02 Oct 2026
- 5.6.0-canary.5b268fc97112 02 Oct 2026
- 5.6.0-canary.f2082e9fe322 02 Oct 2026
- 5.6.0-canary.1a381c26d346 02 Oct 2026
- 5.6.0-canary.ce8fde24c9aa 02 Oct 2026
- 5.6.0-canary.8a7e3d052fb6 02 Oct 2026
- 5.5.1 02 Oct 2026
- 5.6.0-canary.4531a1608b23 01 Oct 2026
- 5.6.0-canary.07d34be92012 01 Oct 2026
- 5.6.0-canary.e9e8ec003426 01 Oct 2026
- 5.6.0-canary.02827d148d0f 01 Oct 2026
- 5.6.0-canary.125f68f749c5 01 Oct 2026
- 5.6.0-canary.c199cbfd6970 01 Oct 2026
- 5.6.0-canary.c30bc5d9d494 01 Oct 2026
- 5.6.0-next.8d4f9ea07151 30 Sep 2026
- 5.6.0-canary.6805116880f8 30 Sep 2026
- 5.6.0-canary.bd562380f08c 30 Sep 2026
- 5.6.0-canary.5bfc37740468 30 Sep 2026
- 5.6.0-canary.bd6a988095c4 30 Sep 2026
- 5.6.0-canary.b3caec45ea30 30 Sep 2026
- 5.6.0-canary.9810618216a6 30 Sep 2026
- 5.6.0-canary.2675be7f44e8 30 Sep 2026
- 5.6.0-canary.d64506617b51 30 Sep 2026
- 5.6.0-canary.669b4c97f643 30 Sep 2026
- 5.6.0-next.af2ed943911a 30 Sep 2026
- 5.6.0-canary.a7f2c4b47eeb 30 Sep 2026
- 5.6.0-next.c4e9c54a816e 30 Sep 2026
- 5.5.0 30 Sep 2026
- 5.5.0-canary.050cd7235060 30 Sep 2026
- 5.5.0-canary.55e32edf710c 30 Sep 2026
- 5.5.0-next.14eccf620014 29 Sep 2026
- 5.5.0-canary.171ad467fb92 29 Sep 2026
- 5.5.0-canary.e5c0a9bc570e 29 Sep 2026
- 5.5.0-canary.45760450803d 29 Sep 2026
- 5.5.0-next.68ff40bd4640 29 Sep 2026
- 5.5.0-canary.b7d58632c970 29 Sep 2026
- 5.5.0-next.7ad1500ad65a 29 Sep 2026
- 5.5.0-canary.ccee63fc4a00 29 Sep 2026
- 5.5.0-canary.da7162e13bd3 29 Sep 2026
- 5.5.0-canary.efb270e2aaf8 29 Sep 2026
- 5.5.0-canary.9e2a0e580a8b 29 Sep 2026
- 5.5.0-canary.7ebd0550bc3e 29 Sep 2026
- 5.5.0-next.9ac8a22a5891 29 Sep 2026
- 5.5.0-canary.389ec7dbf3b2 29 Sep 2026
- 5.5.0-canary.66ce5ddff112 29 Sep 2026
- 5.5.0-next.14c42da77533 29 Sep 2026
- 5.5.0-canary.b522b70ceafb 29 Sep 2026
- 5.5.0-canary.fdd9b4dee0d9 28 Sep 2026
- 5.5.0-canary.a0cd8f2a2e07 28 Sep 2026
- 5.5.0-canary.3444513bc8dd 28 Sep 2026
- 5.5.0-canary.a006d9d6d13f 27 Sep 2026
- 5.5.0-canary.991811a6702a 27 Sep 2026
- 5.5.0-canary.0fb37d21bfea 27 Sep 2026
- 5.5.0-canary.49daf36a417b 26 Sep 2026
- 5.5.0-canary.adf69067a05b 26 Sep 2026
- 5.5.0-canary.59e87f6704db 26 Sep 2026
- 5.5.0-next.ef36c81620dc 25 Sep 2026
- 5.5.0-canary.e371088b1f59 25 Sep 2026
- 5.5.0-canary.54c46ea9ab7a 25 Sep 2026
- 5.5.0-canary.f49a160226de 25 Sep 2026
- 5.5.0-canary.4492a49b7a78 25 Sep 2026
- 5.5.0-canary.931f344394ff 25 Sep 2026
The newest 120 of 5,068 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for @tldraw/assets
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About @tldraw/assets
Is @tldraw/assets safe to use?
Vulert has no vulnerabilities on record for @tldraw/assets in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is @tldraw/assets's Vulert package health score?
Vulert scores @tldraw/assets 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of @tldraw/assets affected?
No. 5.5.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
Which version of @tldraw/assets should I use?
5.5.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.
How many vulnerabilities does @tldraw/assets have?
0 vulnerabilities are recorded for @tldraw/assets in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new @tldraw/assets vulnerabilities disclosed?
0 vulnerabilities were recorded for @tldraw/assets in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of @tldraw/assets are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor @tldraw/assets for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @tldraw/assets version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.