@storybook/experimental-addon-test vulnerabilities

CVEs whose affected-version data names the @storybook/experimental-addon-test package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114125Critical· 8.6

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

▾ Midnightstorybook · storybookvia GHSA

@storybook/experimental-addon-test vulnerabilities (CVEs) · VulnSea