Read the docs

storybookjs

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

storybookjs records in CISA KEV

No storybookjs vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-78906 CVE-2026-114126 · GHSA-px85-f4q5-jh77

Storybook dev server exposes WebSocket token to LAN attackers

Priority MEDIUM 46

Storybook is a frontend workshop for building user interface components and pages in isolation.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00529 Published 2026-10-21 Partial fix · 8.6.19, 9.1.21 +2 CWE-22
TI-2026-34698 CVE-2026-47099 · GHSA-ccgf-5rwj-j3hv

TeleJSON < 6.0.0 DOM-based XSS via parse() Function

Priority LOW 11

TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows attackers to execute arbitrary JavaScript by delivering a crafted JSON payload containing a malicious _c…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00358 Published 2026-05-20 Partial fix · 6.0.0 CWE-79
Open these records in search →