CVE-2026-114126 Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files

[
  {
    "vendor": "storybookjs",
    "product": "storybook",
    "versions": [
      {
        "version": ">= 8.0.0, < 8.6.19",
        "status": "affected"
      },
      {
        "version": ">= 9.0.0, < 9.1.21",
        "status": "affected"
      },
      {
        "version": ">= 10.0.0, < 10.6.2",
        "status": "affected"
      },
      {
        "version": ">= 11.0.0-alpha.0, < 11.0.0-alpha.6",
        "status": "affected"
      }
    ]
  }
]