FA
Product
fabric.js
by fabricjs · last CVE Jun 22, 2026
2
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add fabric.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44311
6.1
0%
Jun 22
Fabric.js: Improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization
Affected: < 7.4.0
CVE-2026-27013
6.1
0%
Feb 19
Fabric.js Affected by Stored XSS via SVG Export
Affected: < 7.2.0
Showing 2