@storybook/core
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Storybook dev server vulnerable to code injection from the local network | @storybook/addon-mcp@storybook/addon-vitest | npmRed Hat | High | Fix reported | |
| Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites | @storybook/addon-mcp@storybook/addon-vitest | npmRed Hat | Critical | Fix reported |