Vulnerabilities

Last updated 47 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
storybook Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites Critical 9.5 2 hours ago 2 hours ago
@storybook/addon-mcp Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites Critical 9.5 2 hours ago 2 hours ago
@storybook/addon-vitest Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites Critical 9.5 2 hours ago 2 hours ago
@storybook/core Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites Critical 9.5 2 hours ago 2 hours ago
@storybook/core-server Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites Critical 9.5 2 hours ago 2 hours ago
@storybook/experimental-addon-test Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites Critical 9.5 2 hours ago 2 hours ago
heft-storybook-v6-react-tutorial-storykit Malicious code in heft-storybook-v6-react-tutorial-storykit (npm) Unknown 2 months ago 27 days ago
storybook Storybook manager bundle may expose environment variables during build High Risk 7.3 10 months ago 1 month ago
phoenix_storybook Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook Unknown 5 months ago 1 month ago
elf-stats-storybook-snowman-513 Malicious code in elf-stats-storybook-snowman-513 (npm) Unknown 3 months ago 1 month ago
elf-stats-storybook-workshop-935 Malicious code in elf-stats-storybook-workshop-935 (npm) Unknown 3 months ago 1 month ago
delivery-ci-storybook Malicious code in delivery-ci-storybook (npm) Unknown 2 months ago 2 months ago
beaver-ui-storybook-addon-code-description Malicious code in beaver-ui-storybook-addon-code-description (npm) Unknown 2 months ago 2 months ago
dolyame-ui-storybook-menu Malicious code in dolyame-ui-storybook-menu (npm) Unknown 2 months ago 2 months ago
boxy-storybook-addon-changelog Malicious code in boxy-storybook-addon-changelog (npm) Unknown 2 months ago 2 months ago
checkout-storybook-default Malicious code in checkout-storybook-default (npm) Unknown 2 months ago 2 months ago
afisha-storybook-default Malicious code in afisha-storybook-default (npm) Unknown 2 months ago 2 months ago
@ornikar/storybook-config Malicious code in @ornikar/storybook-config (npm) Unknown 2 months ago 2 months ago
phoenix_storybook Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground Unknown 5 months ago 2 months ago
phoenix_storybook Cross-session PubSub topic injection via URL parameter in phoenix_storybook Unknown 5 months ago 2 months ago
sf-storybook Malicious code in sf-storybook (npm) Unknown 4 months ago 3 months ago
phoenix_storybook PhoenixStorybook: Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground Critical 9.5 4 months ago 4 months ago
phoenix_storybook PhoenixStorybook: Unbounded atom creation from LiveView event params (atom-table DoS) High Risk 8.0 4 months ago 4 months ago
phoenix_storybook PhoenixStorybook has cross-session PubSub topic injection via URL parameter Low Risk 3.0 4 months ago 4 months ago
storybook Storybook Dev Server is Vulnerable to WebSocket Hijacking High Risk 8.0 7 months ago 7 months ago
elf-stats-storybook-reindeer-552 Malicious code in elf-stats-storybook-reindeer-552 (npm) Unknown 10 months ago 10 months ago
elf-stats-storybook-snowglobe-157 Malicious code in elf-stats-storybook-snowglobe-157 (npm) Unknown 10 months ago 10 months ago
elf-stats-storybook-cookiejar-481 Malicious code in elf-stats-storybook-cookiejar-481 (npm) Unknown 10 months ago 10 months ago
elf-stats-storybook-cookiejar-394 Malicious code in elf-stats-storybook-cookiejar-394 (npm) Unknown 10 months ago 10 months ago
elf-stats-storybook-bow-866 Malicious code in elf-stats-storybook-bow-866 (npm) Unknown 10 months ago 10 months ago
elf-stats-storybook-marshmallow-471 Malicious code in elf-stats-storybook-marshmallow-471 (npm) Unknown 10 months ago 10 months ago
elf-stats-storybook-marshmallow-729 Malicious code in elf-stats-storybook-marshmallow-729 (npm) Unknown 10 months ago 10 months ago
elf-stats-storybook-stocking-662 Malicious code in elf-stats-storybook-stocking-662 (npm) Unknown 10 months ago 10 months ago
o3-storybook Malicious code in o3-storybook (npm) Unknown 12 months ago 10 months ago
@voiceflow/storybook-config Malicious code in @voiceflow/storybook-config (npm) Unknown 11 months ago 10 months ago
elf-stats-storybook-cookiejar-880 Malicious code in elf-stats-storybook-cookiejar-880 (npm) Unknown 11 months ago 11 months ago
elf-stats-storybook-cocoa-790 Malicious code in elf-stats-storybook-cocoa-790 (npm) Unknown 11 months ago 11 months ago
heft-storybook-react-tutorial Malicious code in heft-storybook-react-tutorial (npm) Unknown 1 year ago 1 year ago
storybook-addon-data-roulette Malicious code in storybook-addon-data-roulette (npm) Unknown 1 year ago 1 year ago
@platform-ui-storybook/copy-button Malicious code in @platform-ui-storybook/copy-button (npm) Unknown 1 year ago 1 year ago
storybook-core-core-server-presets-0 Malicious code in storybook-core-core-server-presets-0 (npm) Unknown 1 year ago 1 year ago
justeat-storybook Malicious code in justeat-storybook (npm) Unknown 1 year ago 1 year ago
calypso-storybook Malicious code in calypso-storybook (npm) Unknown 1 year ago 1 year ago
odyssey-storybook Malicious code in odyssey-storybook (npm) Unknown 1 year ago 1 year ago
@monokera/react-components-storybook Malicious code in @monokera/react-components-storybook (npm) Unknown 2 years ago 2 years ago
@pb-shared/storybook-react-library Malicious code in @pb-shared/storybook-react-library (npm) Unknown 4 years ago 2 years ago