Unintended Proxy or Intermediary ('Confused Deputy')

Overview @storybook/core is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the postMessage channel handler in code/core/src/channels/postmessage/index.ts, which does not validate the origin of incoming...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview @storybook/addon-mcp is a Help agents automatically write and test stories for your UI components Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the postMessage channel handler in code/core/src/channels/postmessage/index.ts, whi...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview @storybook/experimental-addon-test is an Integrate Vitest with Storybook Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the postMessage channel handler in code/core/src/channels/postmessage/index.ts, which does not validate the...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview @storybook/core-server is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the postMessage channel handler in code/core/src/channels/postmessage/index.ts, which does not validate the origin of...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview @storybook/addon-vitest is a Storybook Vitest addon: Blazing fast component testing using stories Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the postMessage channel handler in code/core/src/channels/postmessage/index.ts, whi...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview storybook is a frontend workshop for building UI components and pages in isolation. Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the postMessage channel handler in code/core/src/channels/postmessage/index.ts, which does not...