fabricjs

Products

ProductCVEsExploitedLatest
fabric.js2–Jun 22, 2026

Exploited and recent CVEs

  • CVE-2026-44311 Medium 5.4 Fabric.js: Improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization 0.3%
  • CVE-2026-27013 High 7.6 Fabric.js Affected by Stored XSS via SVG Export 0.3%