Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: storybookjs Clear all filters
TI-2026-78906 CVE-2026-114126 · GHSA-px85-f4q5-jh77

Storybook dev server exposes WebSocket token to LAN attackers

Priority MEDIUM 46

Storybook is a frontend workshop for building user interface components and pages in isolation.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00529 Published 2026-10-21 Partial fix · 8.6.19, 9.1.21 +2 CWE-22
TI-2026-34698 CVE-2026-47099 · GHSA-ccgf-5rwj-j3hv

TeleJSON < 6.0.0 DOM-based XSS via parse() Function

Priority LOW 11

TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows attackers to execute arbitrary JavaScript by delivering a crafted JSON payload containing a malicious _c…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00358 Published 2026-05-20 Partial fix · 6.0.0 CWE-79