11 matches found
CVE-2026-27013 Fabric.js Affected by Stored XSS via SVG Export
Fabric.js is a Javascript HTML5 canvas library. Prior to version 7.2.0, Fabric.js applies escapeXml to text content during SVG export src/shapes/Text/TextSVGExportMixin.ts:186 but fails to apply it to other user-controlled string values that are interpolated into SVG attribute markup. When...
GHSA-V73M-FJXV-W4RH fabric-js is malware
The fabric-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...
fabric-js is malware
The fabric-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...
Malicious JavaScript Package Detection
Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
CVE-2017-16053
fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
Code injection
fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16053
"fabric-js" was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16053
fabric-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16053
The CVE-2017-16053 issue involves the npm package fabric-js , published as malware intended to hijack environment variables. Several connected sources (GHSA advisory, npm advisory, and CVE records) confirm that all versions were unpublished from the npm registry and that the malware steals enviro...
PT-2018-6081
Name of the Vulnerable Software and Affected Versions: fabric-js versions all Description: The issue concerns a malicious module named fabric-js that was published with the intent to hijack environment variables, effectively stealing them and sending the data to locations controlled by attackers...
