GHSA-8452-54wp-rmv6
High · 7.3CVSS
7.3
EPSS
—
Published
Dec 18, 2025
CISA due date
—
The record
Storybook manager bundle may expose environment variables during build
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | storybook | 10.0.0 | 10.1.10 |
| npm | storybook | 7.0.0 | 7.6.21 |
| npm | storybook | 8.0.0 | 8.6.15 |
| npm | storybook | 9.0.0 | 9.1.17 |
Related vulnerabilities
- CVE-2025-68429 Storybook is a frontend workshop for building user interface components and pages in… Same vulnerability
- GHSA-mjf5-7g4m-gx5w Storybook Dev Server is Vulnerable to WebSocket Hijacking Also affects storybook
- CVE-2026-27148 Storybook is a frontend workshop for building user interface components and pages in… Also affects storybook
- CVE-2026-114657 Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows… CWE-200
- CVE-2026-114574 A security vulnerability has been detected in massCodeIO massCode 5.10. CWE-200
- CVE-2026-111756 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200
- CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200
- CVE-2026-112091 A flaw has been found in Dav-ee dairy-management-system… CWE-200