storybook (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package storybook, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-27148 — CVSS 9.6 (critical): Storybook is a frontend workshop for building user interface components and pages in isolation. Prior to versions 7.6.23, 8.6.17, 9.1.19…
• CVE-2025-68429 — CVSS 7.3 (high): Storybook is a frontend workshop for building user interface components and pages in isolation. A vulnerability present starting in…