GHSA-hfvx-25r5-qc3w
High · 7.6CVSS
7.6
EPSS
—
Published
Feb 18, 2026
CISA due date
—
The record
Fabric.js Affected by Stored XSS via SVG Export
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | fabric | 0 | 7.2.0 |
Related vulnerabilities
- CVE-2026-27013 Fabric.js is a Javascript HTML5 canvas library. Same vulnerability
- CVE-2026-44311 Fabric.js is a Javascript HTML5 canvas library. Also affects fabric
- GHSA-w22m-hvvm-xmwx Fabric.js improper escaping in fabric.Gradient colorStops leads to XSS in SVG… Also affects fabric
- CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. CWE-116
- CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. CWE-116
- CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. CWE-116
- CVE-2026-104250 The unstructured library provides open-source components for ingesting and pre-processing… CWE-116
- CVE-2026-107823 MariaDB server is a community developed fork of MySQL server. CWE-116