ST
Vendor
storybookjs
4
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114126 New | ST storybook storybookjs | 8.7 | Oct 21 | Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files |
| CVE-2026-114125 New | ST storybook storybookjs | 8.6 | Oct 21 | Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites |
| CVE-2026-47099 | TE telejson storybookjs | 6.1 | May 20 | TeleJSON < 6.0.0 DOM-based XSS via parse() Function |
| CVE-2026-27148 | ST storybook storybookjs | 9.6 | Feb 25 | Storybook Dev Server Vulnerable to WebSocket Hijacking |