storybookjs/storybook Security Advisories | GitStock

high2026-10-22

Storybook dev server vulnerable to code injection from the local network

GHSA-px85-f4q5-jh77 · CVE-2026-114126

critical2026-10-21

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

GHSA-f2ph-cmg5-wxc8 · CVE-2026-114125

high2026-02-26

Storybook Dev Server is Vulnerable to WebSocket Hijacking

GHSA-mjf5-7g4m-gx5w · CVE-2026-27148

high2025-12-18

Storybook manager bundle may expose environment variables during build

GHSA-8452-54wp-rmv6 · CVE-2025-68429