ST
Product
storybook
2
CVEs
0
On KEV
8.7
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add storybook to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114126 New | 8.7 | Oct 21 | Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files Affected: >= 8.0.0, < 8.6.19; >= 9.0.0, < 9.1.21; >= 10.0.0, < 10.6.2; >= 11.0.0-alpha.0, < 11.0.0-alpha.6 |
| CVE-2026-114125 New | 8.6 | Oct 21 | Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites Affected: >= 8.0.0, < 8.6.19; >= 9.0.0, < 9.1.21; >= 10.0.0, < 10.6.2; >= 11.0.0-alpha.0, < 11.0.0-alpha.6 |
Showing 2