ST
Vendor
storybookjs
2 products with CVEs on record
5
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114126
ST
storybook
storybookjs
8.7
1%
Oct 21Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files
CVE-2026-114125
ST
storybook
storybookjs
8.6
0%
Oct 21Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
CVE-2026-47099
TE
telejson
storybookjs
6.1
0%
May 20TeleJSON < 6.0.0 DOM-based XSS via parse() Function
CVE-2026-27148
ST
storybook
storybookjs
9.6
1%
Feb 25Storybook Dev Server Vulnerable to WebSocket Hijacking
CVE-2025-68429
ST
storybook
storybookjs
5.3
0%
Dec 17Storybook manager bundle may expose environment variables during build