Sstorybookjs

Products

Exploited and recent CVEs

• CVE-2026-114126 High 8.7 Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files 0.5%
• CVE-2026-114125 High 8.6 Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites 0.4%
• CVE-2026-47099 Medium 6.1 TeleJSON < 6.0.0 DOM-based XSS via parse() Function 0.4%
• CVE-2026-27148 High 8.8 Storybook Dev Server Vulnerable to WebSocket Hijacking 0.6%
• CVE-2025-68429 High 7.3 Storybook manager bundle may expose environment variables during build 0.3%