storybookjs

Wednesday, October 21

• GitHub CVE-2026-114125
  Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

  • storybookjs storybook
  • Critical
  • CVSS 9.4
  • EPSS 0.38%
  • Fixed version listed
  17:23 UTC