Vulnerabilities

TI-2026-15879 CVE-2026-19504 · GHSA-vc96-76vg-f8vj

Server-side request forgery in fabricjs Fabric.js

LOW 18

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability.

CVSS 3.0MEDIUM 4.0 Local No auth No interaction EPSS 0.00148 Published 2026-09-15 No fix listed CWE-918

TI-2026-32279 CVE-2026-44311 · GHSA-w22m-hvvm-xmwx

MEDIUM 60

Fabric.js is a Javascript HTML5 canvas library.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00271 Published 2026-06-22 Fixed in 7.4.0 CWE-116

TI-2026-21487 CVE-2026-27013 · GHSA-hfvx-25r5-qc3w

LOW 33

Fabric.js is a Javascript HTML5 canvas library.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00328 Published 2026-02-19 Fixed in 7.2.0 CWE-116