601 matches found
ROOT-APP-NPM-AIKIDO-2026-83232 AIKIDO-2026-83232 in storybook - Patched by Root
Root has patched AIKIDO-2026-83232 in the storybook package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-354517 AIKIDO-2026-354517 in storybook - Patched by Root
Root has patched AIKIDO-2026-354517 in the storybook package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27148 CVE-2026-27148 in storybook - Patched by Root
Root has patched CVE-2026-27148 in the storybook package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-114125 CVE-2026-114125 in storybook - Patched by Root
Root has patched CVE-2026-114125 in the storybook package for Root:npm. Multiple fixed versions available...
CLSA-2026-1793362275 TuxCare security update for storybook (2 CVEs)
TuxCare rebuilt storybook to address 2 CVEs. Fixed in 9.1.16-tuxcare.3...
CLSA-2026-1793360914 TuxCare security update for storybook (2 CVEs)
TuxCare rebuilt storybook to address 2 CVEs. Fixed in 10.1.9-tuxcare.2...
CLSA-2026-1793349137 TuxCare security update for storybook (2 CVEs)
TuxCare rebuilt storybook to address 2 CVEs. Fixed in 8.5.8-tuxcare.5...
ROOT-APP-NPM-CVE-2026-114126 CVE-2026-114126 in storybook - Patched by Root
Root has patched CVE-2026-114126 in the storybook package for Root:npm. Multiple fixed versions available...
CLSA-2026-1793185389 TuxCare security update for storybook (1 CVE)
TuxCare rebuilt storybook to address 1 CVE. Fixed in 8.6.14-tuxcare.3...
ROOT-APP-NPM-AIKIDO-2026-255235 AIKIDO-2026-255235 in @chromatic-com/storybook - Patched by Root
Root has patched AIKIDO-2026-255235 in the @chromatic-com/storybook package for Root:npm. Multiple fixed versions available...
CLSA-2026-1792759924 TuxCare security update for @storybook/csf-tools (1 CVE)
TuxCare rebuilt @storybook/csf-tools to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
CLSA-2026-1792759925 TuxCare security update for @storybook/csf-tools (2 CVEs)
TuxCare rebuilt @storybook/csf-tools to address 2 CVEs. Fixed in 8.6.14-tuxcare.1...
storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictions
A flaw was found in Storybook. Due to insufficient iframe embedding and message-origin restrictions, a remote attacker can achieve arbitrary code execution if a developer running a local development server visits a malicious website. By tricking the developer into interacting with an injected...
storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token
A flaw was found in Storybook, which may lead to arbitrary code execution. The development server exposes its WebSocket authentication token to clients loading its web pages across a local area network LAN. An attacker on the local network can capture this token and abuse file-writing functionali...
storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictions
A flaw was found in Storybook. Due to insufficient iframe embedding and message-origin restrictions, a remote attacker can achieve arbitrary code execution if a developer running a local development server visits a malicious website. By tricking the developer into interacting with an injected...
storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token
A flaw was found in Storybook, which may lead to arbitrary code execution. The development server exposes its WebSocket authentication token to clients loading its web pages across a local area network LAN. An attacker on the local network can capture this token and abuse file-writing functionali...
storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token
A flaw was found in Storybook, which may lead to arbitrary code execution. The development server exposes its WebSocket authentication token to clients loading its web pages across a local area network LAN. An attacker on the local network can capture this token and abuse file-writing functionali...
storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictions
A flaw was found in Storybook. Due to insufficient iframe embedding and message-origin restrictions, a remote attacker can achieve arbitrary code execution if a developer running a local development server visits a malicious website. By tricking the developer into interacting with an injected...
