Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Storybook Component: Storybook Clear all filters
TI-2026-21598 CVE-2026-27148 · GHSA-mjf5-7g4m-gx5w

Storybook Dev Server Vulnerable to WebSocket Hijacking

Priority MEDIUM 41

Storybook is a frontend workshop for building user interface components and pages in isolation.

CVSS 4.0HIGH 8.9 Network No auth User interaction EPSS 0.00632 Published 2026-02-25 Partial fix · 7.6.23, 8.6.17 +2 CWE-74