[ Vendor · 2 CVEs ]
storybookjs
CVEs affecting storybookjs published in the last 30 days, plus any storybookjs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114126 | 21 Oct 2026 | CVSS 8.7 | Storybook dev server vulnerable to code injection from the local networkStorybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and… | Fix |
| CVE-2026-114125 | 21 Oct 2026 | CVSS 8.6 | Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitesStorybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and… | Fix |