Fabric.js vulnerabilities

CVEs whose affected-version data names the Fabric.js package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19504Medium· 4.00day

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit t…

▾ MidnightFabric.js · Fabric.jsEPSS 0.12%via NVD

Fabric.js vulnerabilities (CVEs) · VulnSea